@forinda/kickjs 8.6.0 → 8.7.0

package/dist/http/runtimes/h3.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"h3.mjs","names":[],"sources":["../../../src/http/runtimes/h3.ts"],"sourcesContent":["// The h3 runtime — `@forinda/kickjs/h3`.\n//\n// h3 (unjs) is the HTTP layer behind Nitro / Nuxt. This binds it to the same\n// HttpRuntime contract as Express and Fastify: routes become native h3 router\n// routes, and the node `ServerResponse` (h3 exposes it as `event.node.res`) is\n// wrapped in a RuntimeResponse so `ctx.json` / `ctx.html` / `ctx.sse` work\n// unchanged.\n//\n// Targets h3 **v1** (stable, node-based: `createApp` / `createRouter` /\n// `toNodeListener`, with `event.node.req` / `event.node.res`). `h3` is an\n// optional peer pinned to `^1`.\n//\n// h3 v2 (https://h3.dev/migration) moves to a web-standard `Request`/`Response`\n// core. Adopting it is the spec's §8 \"web-standard driver\" — `RuntimeResponse`\n// was shaped so a future `webRuntime()` can implement it over WHATWG streams,\n// at which point h3 v2 (and edge/Bun/Deno) become a driver swap rather than a\n// rewrite. Until that lands, this binding uses the node-compatible v1 surface.\n\nimport type { IncomingMessage, ServerResponse } from 'node:http'\nimport { createRequire } from 'node:module'\n\nimport { classifyMediaType, unsupportedMediaTypeError } from '../body-policy'\nimport { RequestContext } from '../context'\nimport { publishMatchedRoute } from '../runtime'\nimport { applyHandlerResult } from '../reply'\nimport { requestStore } from '../request-store'\nimport { createRequestStore, disposeRequestStore } from '../middleware/request-scope'\nimport { validate } from '../middleware/validate'\nimport { HttpException } from '../../core/errors'\nimport { applyUploadConfig, type RawUploadPart } from '../middleware/upload'\nimport type {\n  ConnectMiddleware,\n  HttpRuntime,\n  RouteEntry,\n  RouteTable,\n  RuntimeAppOptions,\n  RuntimeResponse,\n  UseConnectOptions,\n} from '../runtime'\n\nconst peerRequire = createRequire(import.meta.url)\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nconst h3 = (): any => peerRequire('h3')\n\ninterface H3EventLike {\n  node: { req: IncomingMessage; res: ServerResponse }\n}\ninterface H3AppLike {\n  use(arg1: unknown, arg2?: unknown): unknown\n  handler: unknown\n}\n\nconst NEXT = Symbol('kickjs.h3.next')\nconst ERROR_MW = Symbol('kickjs.h3.errorMw')\n// h3's `createRouter` is terminal — on no match it THROWS a 404, it does not\n// fall through to the next `app.use` layer like an Express Router. So every\n// route source (controllers, /health, devtools /_debug, ad-hoc adapter routes)\n// must live on ONE shared router, registered AFTER all connect middleware.\nconst ROUTER = Symbol('kickjs.h3.router')\nconst NOTFOUND_MW = Symbol('kickjs.h3.notFoundMw')\nconst ASSEMBLED = Symbol('kickjs.h3.assembled')\nconst NOOP_NEXT = (): void => {}\nconst BODY_METHODS = new Set(['POST', 'PUT', 'PATCH', 'DELETE'])\n\n/**\n * Wrap a node ServerResponse (from `event.node.res`) as a RuntimeResponse.\n * A class so the ~12 driver methods live on a shared prototype — the previous\n * object-literal version re-allocated every method closure on each request.\n */\nclass NodeResDriver implements RuntimeResponse {\n  constructor(private readonly res: ServerResponse) {}\n  status(code: number): this {\n    this.res.statusCode = code\n    return this\n  }\n  json(data: unknown): this {\n    // Do not clobber a content-type the caller already chose. This used to set\n    // `application/json` unconditionally, so every `application/problem+json`\n    // response — RFC 9457 problem details, which the error handler sets the\n    // header for before serialising — went out as plain JSON on this runtime\n    // alone. Express and Fastify both leave an existing value alone.\n    if (!this.res.headersSent && !this.res.getHeader('content-type')) {\n      this.res.setHeader('content-type', 'application/json; charset=utf-8')\n    }\n    this.res.end(JSON.stringify(data))\n    return this\n  }\n  send(data: unknown): this {\n    this.res.end(data as never)\n    return this\n  }\n  type(contentType: string): this {\n    this.res.setHeader('content-type', contentType)\n    return this\n  }\n  setHeader(name: string, value: unknown): this {\n    this.res.setHeader(name, value as never)\n    return this\n  }\n  render(): never {\n    throw new Error('ctx.render() is not supported on the h3 runtime (no view engine).')\n  }\n  writeHead(statusCode: number, headers?: Record<string, string | number | string[]>): this {\n    this.res.writeHead(statusCode, headers)\n    return this\n  }\n  flushHeaders(): this {\n    this.res.flushHeaders()\n    return this\n  }\n  write(chunk: unknown): boolean {\n    return this.res.write(chunk as never)\n  }\n  end(data?: unknown): this {\n    this.res.end(data as never)\n    return this\n  }\n  once(event: string, listener: (...args: unknown[]) => void): this {\n    this.res.once(event, listener)\n    return this\n  }\n  get headersSent(): boolean {\n    return this.res.headersSent\n  }\n}\n\nfunction resDriver(res: ServerResponse): RuntimeResponse {\n  return new NodeResDriver(res) as unknown as RuntimeResponse\n}\n\n/** Carries `trustProxy` from createApp() to the per-route handlers. */\nconst TRUST_PROXY = Symbol('kickjs.h3.trustProxy')\n\n/** Build the h3 event handler that runs the kickjs pipeline for one route. */\nfunction makeEventHandler(\n  entry: RouteEntry,\n  trustProxy: boolean,\n): (event: H3EventLike) => Promise<void> {\n  const { getRouterParams, getQuery, readRawBody, readMultipartFormData } = h3()\n  const upload = entry.meta.upload\n  // Validation middleware built ONCE per route (parity with Express) — calling\n  // validate() per request re-allocated the closure every time.\n  const validator = entry.meta.validation ? validate(entry.meta.validation) : undefined\n  return async (event: H3EventLike) => {\n    const req = event.node.req as IncomingMessage & {\n      requestId?: string\n      body?: unknown\n      params?: unknown\n      query?: unknown\n      file?: unknown\n      files?: unknown\n    }\n    const res = event.node.res\n\n    // h3 computes no client address of its own, so `resolveClientIp` fell\n    // straight through to the socket — which behind a proxy is the proxy, and\n    // put every caller in one rate-limit bucket with no way to configure out\n    // of it (#614). Express and Fastify derive `req.ip` from their own\n    // trust-proxy settings; this is h3's equivalent, and like theirs it is\n    // OFF unless the app opts in, because an unverified `x-forwarded-for` is\n    // client-controllable.\n    if (trustProxy && !(req as { ip?: string }).ip) {\n      const forwarded = req.headers['x-forwarded-for']\n      const first = (Array.isArray(forwarded) ? forwarded[0] : forwarded)?.split(',')[0]?.trim()\n      if (first) (req as { ip?: string }).ip = first\n    }\n\n    // Populate the express-shaped request fields h3 keeps elsewhere.\n    req.params = getRouterParams(event) ?? {}\n    req.query = getQuery(event) ?? {}\n    if (upload && upload.mode !== 'none') {\n      // @FileUpload: read the multipart body once (readBody would consume the\n      // same stream, so the two are mutually exclusive). File parts → the\n      // multer-shaped ctx.file/ctx.files; non-file fields → req.body.\n      const form = (await readMultipartFormData(event).catch(() => undefined)) as\n        | Array<{ name?: string; filename?: string; type?: string; data: Buffer }>\n        | undefined\n      const rawParts: RawUploadPart[] = []\n      const fields: Record<string, unknown> = {}\n      for (const part of form ?? []) {\n        if (part.filename) {\n          rawParts.push({\n            fieldname: part.name ?? '',\n            filename: part.filename,\n            mimetype: part.type ?? 'application/octet-stream',\n            buffer: part.data,\n          })\n        } else if (part.name) {\n          fields[part.name] = part.data.toString('utf-8')\n        }\n      }\n      const { file, files } = applyUploadConfig(rawParts, upload)\n      req.file = file\n      req.files = files\n      req.body = fields\n    } else if (BODY_METHODS.has(req.method ?? 'GET')) {\n      // Swallow ONLY the absent-body case. `.catch(() => undefined)` also\n      // swallowed a malformed one, so h3 answered 200 with the handler running\n      // on `undefined` where Express and Fastify both answer 400 — a client\n      // sending broken JSON got a success response, and the handler executed\n      // against data that was never valid.\n      const { 'content-length': length, 'transfer-encoding': encoding } = req.headers\n      const sentBody = encoding !== undefined || (length !== undefined && length !== '0')\n      if (sentBody) {\n        // Read raw and apply the shared policy rather than calling `readBody`,\n        // whose own content-type dispatch is the source of the divergence:\n        // it matches `application/json` with `===` (so `; charset=utf-8` misses)\n        // and routes everything unrecognised through `destr`, which returns the\n        // RAW STRING for malformed input instead of throwing (#590).\n        const kind = classifyMediaType(req.headers['content-type'])\n        if (kind !== 'multipart') {\n          const raw = await readRawBody(event, 'utf8')\n          // Reject only once the body is known to be non-empty. `sentBody` is\n          // true for an empty CHUNKED post — `transfer-encoding` is present\n          // with no payload — and rejecting on that alone would 415 a request\n          // that sent nothing, contradicting the rule the other runtimes apply.\n          if (raw) {\n            if (kind === 'unsupported') {\n              // A body was sent in a format the framework does not parse. Say\n              // so rather than handing the handler `undefined` and letting it\n              // fail somewhere less obvious.\n              throw unsupportedMediaTypeError(req.headers['content-type'])\n            }\n            if (kind === 'json') {\n              try {\n                req.body = JSON.parse(raw)\n              } catch (err) {\n                throw HttpException.badRequest(\n                  err instanceof Error ? err.message : 'Request body could not be parsed',\n                )\n              }\n            } else if (kind === 'urlencoded') {\n              req.body = Object.fromEntries(new URLSearchParams(raw))\n            } else {\n              req.body = raw\n            }\n          }\n        }\n      }\n    }\n\n    const headerId = req.headers['x-request-id']\n    const requestId = (Array.isArray(headerId) ? headerId[0] : headerId) || req.requestId\n    const store = createRequestStore(requestId)\n    req.requestId = store.requestId\n\n    // @PreDestroy teardown for REQUEST-scoped instances once the response\n    // closes (finished or aborted) — parity with requestScopeMiddleware.\n    res.once('close', () => disposeRequestStore(store))\n\n    await requestStore.run(store, async () => {\n      publishMatchedRoute(req, entry)\n      const ctx = new RequestContext(req as never, res as never, NOOP_NEXT, resDriver(res))\n\n      // `beforeValidation` contributors (#677) — ahead of validation and middleware.\n      if (entry.earlyContributorRunner) {\n        await entry.earlyContributorRunner(ctx)\n        if (res.writableEnded) return\n      }\n\n      if (validator) {\n        await new Promise<void>((resolve, reject) => {\n          validator(req as never, undefined as never, (err?: unknown) =>\n            err ? reject(err) : resolve(),\n          )\n        })\n      }\n\n      for (const mw of entry.middlewares) {\n        let advanced = false\n        await new Promise<void>((resolve, reject) => {\n          const next = (err?: unknown): void => {\n            advanced = true\n            if (err) reject(err)\n            else resolve()\n          }\n          Promise.resolve(mw(ctx, next)).catch(reject)\n        })\n        if (!advanced || res.writableEnded) return\n      }\n\n      if (entry.contributorRunner) await entry.contributorRunner(ctx)\n      if (res.writableEnded) return\n      const result = await entry.handler(ctx)\n      // Return-value handlers (reply.ts): auto-send when nothing was written.\n      if (!res.writableEnded && !res.headersSent) applyHandlerResult(ctx, result)\n    })\n  }\n}\n\n/**\n * The original error h3 wrapped.\n *\n * h3 routes every thrown value through `createError()`, which returns its own\n * error with the original on `cause`. Handing that wrapper to the shared error\n * middleware means it sees something Express and Fastify never give it, and the\n * responses diverge: `instanceof HttpException` fails, so a thrown\n * `HttpException(418)` falls through to the generic branch and picks up a\n * `requestId` the other two omit, and `describeError` walks the cause chain to\n * report `kaboom ← caused by kaboom`.\n *\n * Only an `Error` cause is unwrapped. h3's own 404 carries no cause, so the\n * not-found path above is unaffected.\n */\nfunction unwrapH3Error(error: unknown): unknown {\n  if (!(error instanceof Error)) return error\n  const { cause } = error as { cause?: unknown }\n  return cause instanceof Error ? cause : error\n}\n\n/**\n * The h3 HTTP runtime. Pass to `bootstrap({ runtime: h3Runtime() })`.\n * h3 parses bodies itself (`readBody`), so the Application skips its default\n * `express.json()` (see `nativeBodyParsing`).\n */\nexport function h3Runtime(): HttpRuntime<H3AppLike> {\n  return {\n    name: 'h3',\n\n    createApp(options: RuntimeAppOptions = {}): H3AppLike {\n      const { createApp } = h3()\n      const app = createApp({\n        onError: (error: unknown, event: H3EventLike) => {\n          const res = event.node.res\n          if (res.writableEnded) return\n          const state = app as {\n            [ERROR_MW]?: ConnectMiddleware\n            [NOTFOUND_MW]?: ConnectMiddleware\n          }\n          // The shared router throws a 404 on no match (it's terminal). Treat\n          // that as \"not found\", not a server error: hand back to the outer\n          // chain (Vite dev fall-through) when present, else run the framework's\n          // notFound handler so it returns a proper 404 — only genuine handler\n          // errors reach the error middleware (and the ErrorHandler log).\n          const status = (error as { statusCode?: number } | undefined)?.statusCode\n          if (status === 404) {\n            const next = (event.node.req as IncomingMessage & { [NEXT]?: () => void })[NEXT]\n            if (next) {\n              next()\n              return\n            }\n            const nf = state[NOTFOUND_MW]\n            if (nf) {\n              ;(nf as (req: unknown, res: unknown, next: () => void) => void)(\n                event.node.req,\n                resDriver(res),\n                NOOP_NEXT,\n              )\n              return\n            }\n          }\n          const mw = state[ERROR_MW]\n          if (mw) {\n            ;(mw as (e: unknown, req: unknown, res: unknown, next: () => void) => void)(\n              unwrapH3Error(error),\n              event.node.req,\n              resDriver(res),\n              NOOP_NEXT,\n            )\n          }\n        },\n      })\n      // Stash the setting for mountRoutes — h3 has no app-level config object\n      // of its own to hang it on.\n      ;(app as { [TRUST_PROXY]?: unknown })[TRUST_PROXY] = options.trustProxy\n      return app as H3AppLike\n    },\n\n    nodeHandler(app) {\n      const { toNodeListener } = h3()\n      // Register the shared router exactly once, AFTER all connect middleware\n      // (serveStatic / useConnect) the setup phase added via `app.use` — the\n      // router is terminal, so anything that must run for non-route paths has to\n      // sit before it in the stack.\n      const state = app as { [ROUTER]?: unknown; [ASSEMBLED]?: boolean }\n      if (!state[ASSEMBLED]) {\n        state[ASSEMBLED] = true\n        if (state[ROUTER]) app.use(state[ROUTER])\n      }\n      const listener = toNodeListener(app)\n      return (req: IncomingMessage, res: ServerResponse, next?: (err?: unknown) => void) => {\n        if (next) (req as IncomingMessage & { [NEXT]?: (err?: unknown) => void })[NEXT] = next\n        Promise.resolve(listener(req, res)).catch((err) => {\n          if (next) next(err)\n        })\n      }\n    },\n\n    mountRoutes(app, table: RouteTable) {\n      const { createRouter, eventHandler } = h3()\n      const trustProxy = Boolean((app as { [TRUST_PROXY]?: unknown })[TRUST_PROXY])\n      // One shared router per app — every mountRoutes call (controllers, health,\n      // devtools, ad-hoc adapter routes) adds to it. `app.use(router)` is\n      // deferred to nodeHandler so the router lands after connect middleware.\n      const state = app as { [ROUTER]?: ReturnType<typeof createRouter> }\n      if (!state[ROUTER]) state[ROUTER] = createRouter()\n      const router = state[ROUTER]\n      for (const { mountPath, routes } of table) {\n        for (const entry of routes) {\n          const url = joinPath(mountPath, entry.path)\n          const method = entry.method.toLowerCase() as 'get' | 'post' | 'put' | 'delete' | 'patch'\n          router[method](url, eventHandler(makeEventHandler(entry, trustProxy)))\n        }\n      }\n    },\n\n    useConnect(app, mw: ConnectMiddleware, opts?: UseConnectOptions) {\n      const { fromNodeMiddleware } = h3()\n      const handler = fromNodeMiddleware(mw)\n      if (opts?.path !== undefined) app.use(opts.path, handler)\n      else app.use(handler)\n    },\n\n    serveStatic(app, prefix, dir) {\n      // `serve-static` (the standalone connect middleware behind express.static)\n      // so the h3 runtime carries no `express` dependency — bridged via\n      // fromNodeMiddleware like any other connect middleware.\n      const serveStatic = peerRequire('serve-static')\n      this.useConnect(app, serveStatic(dir) as ConnectMiddleware, { path: prefix })\n    },\n\n    setNotFound(app, mw: ConnectMiddleware) {\n      // Stash it — the shared router throws a 404 on no match, which `onError`\n      // (createApp) dispatches to this handler (or to the Vite fall-through when\n      // a `next` is present). A post-router `app.use` could never run, since the\n      // terminal router throws before the stack advances.\n      ;(app as { [NOTFOUND_MW]?: ConnectMiddleware })[NOTFOUND_MW] = mw\n    },\n\n    setErrorHandler(app, mw: ConnectMiddleware) {\n      ;(app as { [ERROR_MW]?: ConnectMiddleware })[ERROR_MW] = mw\n    },\n\n    capabilities: {\n      render: false,\n      uploads: true,\n      connectMiddleware: true,\n      nativeBodyParsing: true,\n    },\n  }\n}\n\n/**\n * The h3 runtime's engine-native types — what the runtime-typed escape hatches\n * resolve to once the `kick/runtime` typegen emits a `KickRuntimeRegister`\n * augmentation pointing here (spec §4.3b). `AdapterContext.app` / `getRuntimeApp()`\n * become the h3 `App`; `ctx.req` / `ctx.res` the per-request `H3Event` (h3 v1\n * routes everything through the event). Mirrors `ExpressRuntimeTypes`.\n */\n// Resolved conditionally so this file typechecks against EITHER installed h3\n// major: v1 exports `App`; v2 (used by the sibling h3-web runtime) does not.\n// Runtime behavior is untouched — this block is type-only.\ntype H3AppType = typeof import('h3') extends { App: infer A } ? A : unknown\ntype H3EventType = typeof import('h3') extends { H3Event: new (...args: never[]) => infer E }\n  ? E\n  : unknown\n\nexport interface H3RuntimeTypes {\n  request: H3EventType\n  response: H3EventType\n  app: H3AppType\n}\n\n/** Join a mount prefix and a route path; a root path maps to the prefix itself. */\nfunction joinPath(mountPath: string, path: string): string {\n  const a = mountPath.endsWith('/') ? mountPath.slice(0, -1) : mountPath\n  if (path === '/' || path === '') return a === '' ? '/' : a\n  const b = path.startsWith('/') ? path : `/${path}`\n  return `${a}${b}`\n}\n"],"mappings":";;;;;;;;;;6fAwCA,MAAM,YAAc,cAAc,YAAY,GAAG,EAE3C,OAAgB,YAAY,IAAI,EAUhC,KAAO,OAAO,gBAAgB,EAC9B,SAAW,OAAO,mBAAmB,EAKrC,OAAS,OAAO,kBAAkB,EAClC,YAAc,OAAO,sBAAsB,EAC3C,UAAY,OAAO,qBAAqB,EACxC,cAAwB,CAAC,EACzB,aAAe,IAAI,IAAI,CAAC,OAAQ,MAAO,QAAS,QAAQ,CAAC,EAO/D,IAAM,cAAN,KAA+C,CAChB,IAA7B,YAAY,IAAsC,CAArB,KAAA,IAAA,GAAsB,CACnD,OAAO,KAAoB,CAEzB,MADA,MAAK,IAAI,WAAa,KACf,IACT,CACA,KAAK,KAAqB,CAUxB,MAJI,CAAC,KAAK,IAAI,aAAe,CAAC,KAAK,IAAI,UAAU,cAAc,GAC7D,KAAK,IAAI,UAAU,eAAgB,iCAAiC,EAEtE,KAAK,IAAI,IAAI,KAAK,UAAU,IAAI,CAAC,EAC1B,IACT,CACA,KAAK,KAAqB,CAExB,OADA,KAAK,IAAI,IAAI,IAAa,EACnB,IACT,CACA,KAAK,YAA2B,CAE9B,OADA,KAAK,IAAI,UAAU,eAAgB,WAAW,EACvC,IACT,CACA,UAAU,KAAc,MAAsB,CAE5C,OADA,KAAK,IAAI,UAAU,KAAM,KAAc,EAChC,IACT,CACA,QAAgB,CACd,MAAU,MAAM,mEAAmE,CACrF,CACA,UAAU,WAAoB,QAA4D,CAExF,OADA,KAAK,IAAI,UAAU,WAAY,OAAO,EAC/B,IACT,CACA,cAAqB,CAEnB,OADA,KAAK,IAAI,aAAa,EACf,IACT,CACA,MAAM,MAAyB,CAC7B,OAAO,KAAK,IAAI,MAAM,KAAc,CACtC,CACA,IAAI,KAAsB,CAExB,OADA,KAAK,IAAI,IAAI,IAAa,EACnB,IACT,CACA,KAAK,MAAe,SAA8C,CAEhE,OADA,KAAK,IAAI,KAAK,MAAO,QAAQ,EACtB,IACT,CACA,IAAI,aAAuB,CACzB,OAAO,KAAK,IAAI,WAClB,CACF,EAEA,SAAS,UAAU,IAAsC,CACvD,OAAO,IAAI,cAAc,GAAG,CAC9B,CAGA,MAAM,YAAc,OAAO,sBAAsB,EAGjD,SAAS,iBACP,MACA,WACuC,CACvC,GAAM,CAAE,gBAAiB,SAAU,YAAa,uBAA0B,GAAG,EACvE,OAAS,MAAM,KAAK,OAGpB,UAAY,MAAM,KAAK,WAAa,SAAS,MAAM,KAAK,UAAU,EAAI,IAAA,GAC5E,OAAO,KAAO,QAAuB,CACnC,IAAM,IAAM,MAAM,KAAK,IAQjB,IAAM,MAAM,KAAK,IASvB,GAAI,YAAc,CAAE,IAAwB,GAAI,CAC9C,IAAM,UAAY,IAAI,QAAQ,mBACxB,OAAS,MAAM,QAAQ,SAAS,EAAI,UAAU,GAAK,UAAA,EAAY,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EACrF,QAAO,IAAyB,GAAK,MAC3C,CAKA,GAFA,IAAI,OAAS,gBAAgB,KAAK,GAAK,CAAC,EACxC,IAAI,MAAQ,SAAS,KAAK,GAAK,CAAC,EAC5B,QAAU,OAAO,OAAS,OAAQ,CAIpC,IAAM,KAAQ,MAAM,sBAAsB,KAAK,CAAC,CAAC,UAAY,IAAA,EAAS,EAGhE,SAA4B,CAAC,EAC7B,OAAkC,CAAC,EACzC,IAAK,IAAM,QAAQ,MAAQ,CAAC,EACtB,KAAK,SACP,SAAS,KAAK,CACZ,UAAW,KAAK,MAAQ,GACxB,SAAU,KAAK,SACf,SAAU,KAAK,MAAQ,2BACvB,OAAQ,KAAK,IACf,CAAC,EACQ,KAAK,OACd,OAAO,KAAK,MAAQ,KAAK,KAAK,SAAS,OAAO,GAGlD,GAAM,CAAE,KAAM,OAAU,kBAAkB,SAAU,MAAM,EAC1D,IAAI,KAAO,KACX,IAAI,MAAQ,MACZ,IAAI,KAAO,MACb,MAAO,GAAI,aAAa,IAAI,IAAI,QAAU,KAAK,EAAG,CAMhD,GAAM,CAAE,iBAAkB,OAAQ,oBAAqB,UAAa,IAAI,QAExE,GADiB,WAAa,IAAA,IAAc,SAAW,IAAA,IAAa,SAAW,IACjE,CAMZ,IAAM,KAAO,kBAAkB,IAAI,QAAQ,eAAe,EAC1D,GAAI,OAAS,YAAa,CACxB,IAAM,IAAM,MAAM,YAAY,MAAO,MAAM,EAK3C,GAAI,IAAK,CACP,GAAI,OAAS,cAIX,MAAM,0BAA0B,IAAI,QAAQ,eAAe,EAE7D,GAAI,OAAS,OACX,GAAI,CACF,IAAI,KAAO,KAAK,MAAM,GAAG,CAC3B,OAAS,IAAK,CACZ,MAAM,cAAc,WAClB,eAAe,MAAQ,IAAI,QAAU,kCACvC,CACF,KACK,CAGL,IAAI,KAHK,OAAS,aACP,OAAO,YAAY,IAAI,gBAAgB,GAAG,CAAC,EAE3C,GAEf,CACF,CACF,CACF,CAEA,IAAM,SAAW,IAAI,QAAQ,gBACvB,WAAa,MAAM,QAAQ,QAAQ,EAAI,SAAS,GAAK,WAAa,IAAI,UACtE,MAAQ,mBAAmB,SAAS,EAC1C,IAAI,UAAY,MAAM,UAItB,IAAI,KAAK,YAAe,oBAAoB,KAAK,CAAC,EAElD,MAAM,aAAa,IAAI,MAAO,SAAY,CACxC,oBAAoB,IAAK,KAAK,EAC9B,IAAM,IAAM,IAAI,eAAe,IAAc,IAAc,UAAW,UAAU,GAAG,CAAC,EAGpF,GAAI,MAAM,yBACR,MAAM,MAAM,uBAAuB,GAAG,EAClC,IAAI,eAAe,OAGrB,WACF,MAAM,IAAI,SAAe,QAAS,SAAW,CAC3C,UAAU,IAAc,IAAA,GAAqB,KAC3C,IAAM,OAAO,GAAG,EAAI,QAAQ,CAC9B,CACF,CAAC,EAGH,IAAK,IAAM,MAAM,MAAM,YAAa,CAClC,IAAI,SAAW,GASf,GARA,MAAM,IAAI,SAAe,QAAS,SAAW,CAM3C,QAAQ,QAAQ,GAAG,IALL,KAAwB,CACpC,SAAW,GACP,IAAK,OAAO,GAAG,EACd,QAAQ,CACf,CAC4B,CAAC,CAAC,CAAC,MAAM,MAAM,CAC7C,CAAC,EACG,CAAC,UAAY,IAAI,cAAe,MACtC,CAGA,GADI,MAAM,mBAAmB,MAAM,MAAM,kBAAkB,GAAG,EAC1D,IAAI,cAAe,OACvB,IAAM,OAAS,MAAM,MAAM,QAAQ,GAAG,EAElC,CAAC,IAAI,eAAiB,CAAC,IAAI,aAAa,mBAAmB,IAAK,MAAM,CAC5E,CAAC,CACH,CACF,CAgBA,SAAS,cAAc,MAAyB,CAC9C,GAAI,EAAE,iBAAiB,OAAQ,OAAO,MACtC,GAAM,CAAE,OAAU,MAClB,OAAO,iBAAiB,MAAQ,MAAQ,KAC1C,CAOA,SAAgB,WAAoC,CAClD,MAAO,CACL,KAAM,KAEN,UAAU,QAA6B,CAAC,EAAc,CACpD,GAAM,CAAE,WAAc,GAAG,EACnB,IAAM,UAAU,CACpB,SAAU,MAAgB,QAAuB,CAC/C,IAAM,IAAM,MAAM,KAAK,IACvB,GAAI,IAAI,cAAe,OACvB,IAAM,MAAQ,IAUd,GADgB,OAA+C,aAChD,IAAK,CAClB,IAAM,KAAQ,MAAM,KAAK,IAAkD,MAC3E,GAAI,KAAM,CACR,KAAK,EACL,MACF,CACA,IAAM,GAAK,MAAM,aACjB,GAAI,GAAI,CACL,GACC,MAAM,KAAK,IACX,UAAU,GAAG,EACb,SACF,EACA,MACF,CACF,CACA,IAAM,GAAK,MAAM,UACb,IACD,GACC,cAAc,KAAK,EACnB,MAAM,KAAK,IACX,UAAU,GAAG,EACb,SACF,CAEJ,CACF,CAAC,EAID,MADC,KAAqC,aAAe,QAAQ,WACtD,GACT,EAEA,YAAY,IAAK,CACf,GAAM,CAAE,gBAAmB,GAAG,EAKxB,MAAQ,IACT,MAAM,aACT,MAAM,WAAa,GACf,MAAM,SAAS,IAAI,IAAI,MAAM,OAAO,GAE1C,IAAM,SAAW,eAAe,GAAG,EACnC,OAAQ,IAAsB,IAAqB,OAAmC,CAChF,OAAM,IAAgE,MAAQ,MAClF,QAAQ,QAAQ,SAAS,IAAK,GAAG,CAAC,CAAC,CAAC,MAAO,KAAQ,CAC7C,MAAM,KAAK,GAAG,CACpB,CAAC,CACH,CACF,EAEA,YAAY,IAAK,MAAmB,CAClC,GAAM,CAAE,aAAc,cAAiB,GAAG,EACpC,WAAa,EAAS,IAAoC,aAI1D,MAAQ,IACT,MAAM,UAAS,MAAM,QAAU,aAAa,GACjD,IAAM,OAAS,MAAM,QACrB,IAAK,GAAM,CAAE,UAAW,UAAY,MAClC,IAAK,IAAM,SAAS,OAAQ,CAC1B,IAAM,IAAM,SAAS,UAAW,MAAM,IAAI,EAE1C,OADe,MAAM,OAAO,YAChB,EAAE,CAAC,IAAK,aAAa,iBAAiB,MAAO,UAAU,CAAC,CAAC,CACvE,CAEJ,EAEA,WAAW,IAAK,GAAuB,KAA0B,CAC/D,GAAM,CAAE,oBAAuB,GAAG,EAC5B,QAAU,mBAAmB,EAAE,EACjC,MAAM,OAAS,IAAA,GACd,IAAI,IAAI,OAAO,EADU,IAAI,IAAI,KAAK,KAAM,OAAO,CAE1D,EAEA,YAAY,IAAK,OAAQ,IAAK,CAI5B,IAAM,YAAc,YAAY,cAAc,EAC9C,KAAK,WAAW,IAAK,YAAY,GAAG,EAAwB,CAAE,KAAM,MAAO,CAAC,CAC9E,EAEA,YAAY,IAAK,GAAuB,CAKrC,IAA+C,aAAe,EACjE,EAEA,gBAAgB,IAAK,GAAuB,CACzC,IAA4C,UAAY,EAC3D,EAEA,aAAc,CACZ,OAAQ,GACR,QAAS,GACT,kBAAmB,GACnB,kBAAmB,EACrB,CACF,CACF,CAwBA,SAAS,SAAS,UAAmB,KAAsB,CACzD,IAAM,EAAI,UAAU,SAAS,GAAG,EAAI,UAAU,MAAM,EAAG,EAAE,EAAI,UAG7D,OAFI,OAAS,KAAO,OAAS,GAAW,IAAM,GAAK,IAAM,EAElD,GAAG,IADA,KAAK,WAAW,GAAG,EAAI,KAAO,IAAI,QAE9C"}
+{"version":3,"file":"h3.mjs","names":[],"sources":["../../../src/http/runtimes/h3.ts"],"sourcesContent":["// The h3 runtime — `@forinda/kickjs/h3`.\n//\n// h3 (unjs) is the HTTP layer behind Nitro / Nuxt. This binds it to the same\n// HttpRuntime contract as Express and Fastify: routes become native h3 router\n// routes, and the node `ServerResponse` (h3 exposes it as `event.node.res`) is\n// wrapped in a RuntimeResponse so `ctx.json` / `ctx.html` / `ctx.sse` work\n// unchanged.\n//\n// Targets h3 **v1** (stable, node-based: `createApp` / `createRouter` /\n// `toNodeListener`, with `event.node.req` / `event.node.res`). `h3` is an\n// optional peer pinned to `^1`.\n//\n// h3 v2 (https://h3.dev/migration) moves to a web-standard `Request`/`Response`\n// core. Adopting it is the spec's §8 \"web-standard driver\" — `RuntimeResponse`\n// was shaped so a future `webRuntime()` can implement it over WHATWG streams,\n// at which point h3 v2 (and edge/Bun/Deno) become a driver swap rather than a\n// rewrite. Until that lands, this binding uses the node-compatible v1 surface.\n\nimport type { IncomingMessage, ServerResponse } from 'node:http'\nimport { createRequire } from 'node:module'\n\nimport { classifyMediaType, unsupportedMediaTypeError } from '../body-policy'\nimport { RequestContext } from '../context'\nimport { publishMatchedRoute } from '../runtime'\nimport { applyHandlerResult } from '../reply'\nimport { requestStore } from '../request-store'\nimport { createRequestStore, disposeRequestStore } from '../middleware/request-scope'\nimport { validate } from '../middleware/validate'\nimport { HttpException } from '../../core/errors'\nimport { applyUploadConfig, type RawUploadPart } from '../middleware/upload'\nimport type {\n  ConnectMiddleware,\n  HttpRuntime,\n  RouteEntry,\n  RouteTable,\n  RuntimeAppOptions,\n  RuntimeResponse,\n  UseConnectOptions,\n} from '../runtime'\n\nconst peerRequire = createRequire(import.meta.url)\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nconst h3 = (): any => peerRequire('h3')\n\ninterface H3EventLike {\n  node: { req: IncomingMessage; res: ServerResponse }\n}\ninterface H3AppLike {\n  use(arg1: unknown, arg2?: unknown): unknown\n  handler: unknown\n}\n\nconst NEXT = Symbol('kickjs.h3.next')\nconst ERROR_MW = Symbol('kickjs.h3.errorMw')\n// h3's `createRouter` is terminal — on no match it THROWS a 404, it does not\n// fall through to the next `app.use` layer like an Express Router. So every\n// route source (controllers, /health, devtools /_debug, ad-hoc adapter routes)\n// must live on ONE shared router, registered AFTER all connect middleware.\nconst ROUTER = Symbol('kickjs.h3.router')\nconst NOTFOUND_MW = Symbol('kickjs.h3.notFoundMw')\nconst ASSEMBLED = Symbol('kickjs.h3.assembled')\nconst NOOP_NEXT = (): void => {}\nconst BODY_METHODS = new Set(['POST', 'PUT', 'PATCH', 'DELETE'])\n\n/**\n * Wrap a node ServerResponse (from `event.node.res`) as a RuntimeResponse.\n * A class so the ~12 driver methods live on a shared prototype — the previous\n * object-literal version re-allocated every method closure on each request.\n */\nclass NodeResDriver implements RuntimeResponse {\n  constructor(private readonly res: ServerResponse) {}\n  status(code: number): this {\n    this.res.statusCode = code\n    return this\n  }\n  json(data: unknown): this {\n    // Do not clobber a content-type the caller already chose. This used to set\n    // `application/json` unconditionally, so every `application/problem+json`\n    // response — RFC 9457 problem details, which the error handler sets the\n    // header for before serialising — went out as plain JSON on this runtime\n    // alone. Express and Fastify both leave an existing value alone.\n    if (!this.res.headersSent && !this.res.getHeader('content-type')) {\n      this.res.setHeader('content-type', 'application/json; charset=utf-8')\n    }\n    this.res.end(JSON.stringify(data))\n    return this\n  }\n  send(data: unknown): this {\n    this.res.end(data as never)\n    return this\n  }\n  type(contentType: string): this {\n    this.res.setHeader('content-type', contentType)\n    return this\n  }\n  setHeader(name: string, value: unknown): this {\n    this.res.setHeader(name, value as never)\n    return this\n  }\n  render(): never {\n    throw new Error('ctx.render() is not supported on the h3 runtime (no view engine).')\n  }\n  writeHead(statusCode: number, headers?: Record<string, string | number | string[]>): this {\n    this.res.writeHead(statusCode, headers)\n    return this\n  }\n  flushHeaders(): this {\n    this.res.flushHeaders()\n    return this\n  }\n  write(chunk: unknown): boolean {\n    return this.res.write(chunk as never)\n  }\n  end(data?: unknown): this {\n    this.res.end(data as never)\n    return this\n  }\n  once(event: string, listener: (...args: unknown[]) => void): this {\n    this.res.once(event, listener)\n    return this\n  }\n  get headersSent(): boolean {\n    return this.res.headersSent\n  }\n}\n\nfunction resDriver(res: ServerResponse): RuntimeResponse {\n  return new NodeResDriver(res) as unknown as RuntimeResponse\n}\n\n/** Carries `trustProxy` from createApp() to the per-route handlers. */\nconst TRUST_PROXY = Symbol('kickjs.h3.trustProxy')\n\n/** Build the h3 event handler that runs the kickjs pipeline for one route. */\nfunction makeEventHandler(\n  entry: RouteEntry,\n  trustProxy: boolean,\n): (event: H3EventLike) => Promise<void> {\n  const { getRouterParams, getQuery, readRawBody, readMultipartFormData } = h3()\n  const upload = entry.meta.upload\n  // Validation middleware built ONCE per route (parity with Express) — calling\n  // validate() per request re-allocated the closure every time.\n  const validator = entry.meta.validation ? validate(entry.meta.validation) : undefined\n  return async (event: H3EventLike) => {\n    const req = event.node.req as IncomingMessage & {\n      requestId?: string\n      body?: unknown\n      params?: unknown\n      query?: unknown\n      file?: unknown\n      files?: unknown\n    }\n    const res = event.node.res\n\n    // h3 computes no client address of its own, so `resolveClientIp` fell\n    // straight through to the socket — which behind a proxy is the proxy, and\n    // put every caller in one rate-limit bucket with no way to configure out\n    // of it (#614). Express and Fastify derive `req.ip` from their own\n    // trust-proxy settings; this is h3's equivalent, and like theirs it is\n    // OFF unless the app opts in, because an unverified `x-forwarded-for` is\n    // client-controllable.\n    if (trustProxy && !(req as { ip?: string }).ip) {\n      const forwarded = req.headers['x-forwarded-for']\n      const first = (Array.isArray(forwarded) ? forwarded[0] : forwarded)?.split(',')[0]?.trim()\n      if (first) (req as { ip?: string }).ip = first\n    }\n\n    // Populate the express-shaped request fields h3 keeps elsewhere.\n    req.params = getRouterParams(event) ?? {}\n    req.query = getQuery(event) ?? {}\n\n    // HTTP/2 frames a body in DATA frames: no `transfer-encoding`, and\n    // `content-length` is optional. h3's `readRawBody` — behind both the\n    // JSON/text path and `readMultipartFormData` — returns `undefined` when\n    // neither header is present, dropping the body. Read it once as bytes and\n    // hand it over on `req.rawBody`, which `readRawBody` checks first.\n    if (\n      req.httpVersionMajor === 2 &&\n      req.headers['content-length'] === undefined &&\n      BODY_METHODS.has(req.method ?? 'GET')\n    ) {\n      ;(req as { rawBody?: Buffer }).rawBody = await readStreamBuffer(req)\n    }\n    if (upload && upload.mode !== 'none') {\n      // @FileUpload: read the multipart body once (readBody would consume the\n      // same stream, so the two are mutually exclusive). File parts → the\n      // multer-shaped ctx.file/ctx.files; non-file fields → req.body.\n      const form = (await readMultipartFormData(event).catch(() => undefined)) as\n        | Array<{ name?: string; filename?: string; type?: string; data: Buffer }>\n        | undefined\n      const rawParts: RawUploadPart[] = []\n      const fields: Record<string, unknown> = {}\n      for (const part of form ?? []) {\n        if (part.filename) {\n          rawParts.push({\n            fieldname: part.name ?? '',\n            filename: part.filename,\n            mimetype: part.type ?? 'application/octet-stream',\n            buffer: part.data,\n          })\n        } else if (part.name) {\n          fields[part.name] = part.data.toString('utf-8')\n        }\n      }\n      const { file, files } = applyUploadConfig(rawParts, upload)\n      req.file = file\n      req.files = files\n      req.body = fields\n    } else if (BODY_METHODS.has(req.method ?? 'GET')) {\n      // Swallow ONLY the absent-body case. `.catch(() => undefined)` also\n      // swallowed a malformed one, so h3 answered 200 with the handler running\n      // on `undefined` where Express and Fastify both answer 400 — a client\n      // sending broken JSON got a success response, and the handler executed\n      // against data that was never valid.\n      // HTTP/2 frames the body in DATA frames: no `transfer-encoding`, and\n      // `content-length` is optional, so there a body may be present with\n      // neither header — only an explicit `content-length: 0` rules it out.\n      const { 'content-length': length, 'transfer-encoding': encoding } = req.headers\n      const sentBody =\n        encoding !== undefined ||\n        (length !== undefined && length !== '0') ||\n        (req.httpVersionMajor === 2 && length !== '0')\n      if (sentBody) {\n        // Read raw and apply the shared policy rather than calling `readBody`,\n        // whose own content-type dispatch is the source of the divergence:\n        // it matches `application/json` with `===` (so `; charset=utf-8` misses)\n        // and routes everything unrecognised through `destr`, which returns the\n        // RAW STRING for malformed input instead of throwing (#590).\n        const kind = classifyMediaType(req.headers['content-type'])\n        if (kind !== 'multipart') {\n          const raw = await readRawBody(event, 'utf8')\n          // Reject only once the body is known to be non-empty. `sentBody` is\n          // true for an empty CHUNKED post — `transfer-encoding` is present\n          // with no payload — and rejecting on that alone would 415 a request\n          // that sent nothing, contradicting the rule the other runtimes apply.\n          if (raw) {\n            if (kind === 'unsupported') {\n              // A body was sent in a format the framework does not parse. Say\n              // so rather than handing the handler `undefined` and letting it\n              // fail somewhere less obvious.\n              throw unsupportedMediaTypeError(req.headers['content-type'])\n            }\n            if (kind === 'json') {\n              try {\n                req.body = JSON.parse(raw)\n              } catch (err) {\n                throw HttpException.badRequest(\n                  err instanceof Error ? err.message : 'Request body could not be parsed',\n                )\n              }\n            } else if (kind === 'urlencoded') {\n              req.body = Object.fromEntries(new URLSearchParams(raw))\n            } else {\n              req.body = raw\n            }\n          }\n        }\n      }\n    }\n\n    const headerId = req.headers['x-request-id']\n    const requestId = (Array.isArray(headerId) ? headerId[0] : headerId) || req.requestId\n    const store = createRequestStore(requestId)\n    req.requestId = store.requestId\n\n    // @PreDestroy teardown for REQUEST-scoped instances once the response\n    // closes (finished or aborted) — parity with requestScopeMiddleware.\n    res.once('close', () => disposeRequestStore(store))\n\n    await requestStore.run(store, async () => {\n      publishMatchedRoute(req, entry)\n      const ctx = new RequestContext(req as never, res as never, NOOP_NEXT, resDriver(res))\n\n      // `beforeValidation` contributors (#677) — ahead of validation and middleware.\n      if (entry.earlyContributorRunner) {\n        await entry.earlyContributorRunner(ctx)\n        if (res.writableEnded) return\n      }\n\n      if (validator) {\n        await new Promise<void>((resolve, reject) => {\n          validator(req as never, undefined as never, (err?: unknown) =>\n            err ? reject(err) : resolve(),\n          )\n        })\n      }\n\n      for (const mw of entry.middlewares) {\n        let advanced = false\n        await new Promise<void>((resolve, reject) => {\n          const next = (err?: unknown): void => {\n            advanced = true\n            if (err) reject(err)\n            else resolve()\n          }\n          Promise.resolve(mw(ctx, next)).catch(reject)\n        })\n        if (!advanced || res.writableEnded) return\n      }\n\n      if (entry.contributorRunner) await entry.contributorRunner(ctx)\n      if (res.writableEnded) return\n      const result = await entry.handler(ctx)\n      // Return-value handlers (reply.ts): auto-send when nothing was written.\n      if (!res.writableEnded && !res.headersSent) applyHandlerResult(ctx, result)\n    })\n  }\n}\n\n/**\n * The original error h3 wrapped.\n *\n * h3 routes every thrown value through `createError()`, which returns its own\n * error with the original on `cause`. Handing that wrapper to the shared error\n * middleware means it sees something Express and Fastify never give it, and the\n * responses diverge: `instanceof HttpException` fails, so a thrown\n * `HttpException(418)` falls through to the generic branch and picks up a\n * `requestId` the other two omit, and `describeError` walks the cause chain to\n * report `kaboom ← caused by kaboom`.\n *\n * Only an `Error` cause is unwrapped. h3's own 404 carries no cause, so the\n * not-found path above is unaffected.\n */\nfunction unwrapH3Error(error: unknown): unknown {\n  if (!(error instanceof Error)) return error\n  const { cause } = error as { cause?: unknown }\n  return cause instanceof Error ? cause : error\n}\n\n/**\n * The h3 HTTP runtime. Pass to `bootstrap({ runtime: h3Runtime() })`.\n * h3 parses bodies itself (`readBody`), so the Application skips its default\n * `express.json()` (see `nativeBodyParsing`).\n */\n/** Collect a request stream as bytes — never decoded, so file parts stay intact. */\nasync function readStreamBuffer(req: AsyncIterable<Buffer | string>): Promise<Buffer> {\n  const chunks: Buffer[] = []\n  for await (const chunk of req) chunks.push(typeof chunk === 'string' ? Buffer.from(chunk) : chunk)\n  return Buffer.concat(chunks)\n}\n\nexport function h3Runtime(): HttpRuntime<H3AppLike> {\n  return {\n    name: 'h3',\n\n    createApp(options: RuntimeAppOptions = {}): H3AppLike {\n      const { createApp } = h3()\n      const app = createApp({\n        onError: (error: unknown, event: H3EventLike) => {\n          const res = event.node.res\n          if (res.writableEnded) return\n          const state = app as {\n            [ERROR_MW]?: ConnectMiddleware\n            [NOTFOUND_MW]?: ConnectMiddleware\n          }\n          // The shared router throws a 404 on no match (it's terminal). Treat\n          // that as \"not found\", not a server error: hand back to the outer\n          // chain (Vite dev fall-through) when present, else run the framework's\n          // notFound handler so it returns a proper 404 — only genuine handler\n          // errors reach the error middleware (and the ErrorHandler log).\n          //\n          // Only the ROUTER's no-match counts: h3 builds it from a plain object,\n          // so its `cause` is not an Error. A handler that throws\n          // `HttpException(404, '…')` arrives wrapped with the exception as\n          // `cause` — that is a handler error and belongs to the error\n          // middleware, which keeps its detail (and reports it to observers).\n          const status = (error as { statusCode?: number } | undefined)?.statusCode\n          const thrownByHandler = (error as { cause?: unknown } | undefined)?.cause instanceof Error\n          if (status === 404 && !thrownByHandler) {\n            const next = (event.node.req as IncomingMessage & { [NEXT]?: () => void })[NEXT]\n            if (next) {\n              next()\n              return\n            }\n            const nf = state[NOTFOUND_MW]\n            if (nf) {\n              ;(nf as (req: unknown, res: unknown, next: () => void) => void)(\n                event.node.req,\n                resDriver(res),\n                NOOP_NEXT,\n              )\n              return\n            }\n          }\n          const mw = state[ERROR_MW]\n          if (mw) {\n            ;(mw as (e: unknown, req: unknown, res: unknown, next: () => void) => void)(\n              unwrapH3Error(error),\n              event.node.req,\n              resDriver(res),\n              NOOP_NEXT,\n            )\n          }\n        },\n      })\n      // Stash the setting for mountRoutes — h3 has no app-level config object\n      // of its own to hang it on.\n      ;(app as { [TRUST_PROXY]?: unknown })[TRUST_PROXY] = options.trustProxy\n      return app as H3AppLike\n    },\n\n    nodeHandler(app) {\n      const { toNodeListener } = h3()\n      // Register the shared router exactly once, AFTER all connect middleware\n      // (serveStatic / useConnect) the setup phase added via `app.use` — the\n      // router is terminal, so anything that must run for non-route paths has to\n      // sit before it in the stack.\n      const state = app as { [ROUTER]?: unknown; [ASSEMBLED]?: boolean }\n      if (!state[ASSEMBLED]) {\n        state[ASSEMBLED] = true\n        if (state[ROUTER]) app.use(state[ROUTER])\n      }\n      const listener = toNodeListener(app)\n      return (req: IncomingMessage, res: ServerResponse, next?: (err?: unknown) => void) => {\n        if (next) (req as IncomingMessage & { [NEXT]?: (err?: unknown) => void })[NEXT] = next\n        Promise.resolve(listener(req, res)).catch((err) => {\n          if (next) next(err)\n        })\n      }\n    },\n\n    mountRoutes(app, table: RouteTable) {\n      const { createRouter, eventHandler } = h3()\n      const trustProxy = Boolean((app as { [TRUST_PROXY]?: unknown })[TRUST_PROXY])\n      // One shared router per app — every mountRoutes call (controllers, health,\n      // devtools, ad-hoc adapter routes) adds to it. `app.use(router)` is\n      // deferred to nodeHandler so the router lands after connect middleware.\n      const state = app as { [ROUTER]?: ReturnType<typeof createRouter> }\n      if (!state[ROUTER]) state[ROUTER] = createRouter()\n      const router = state[ROUTER]\n      for (const { mountPath, routes } of table) {\n        for (const entry of routes) {\n          const url = joinPath(mountPath, entry.path)\n          const method = entry.method.toLowerCase() as 'get' | 'post' | 'put' | 'delete' | 'patch'\n          router[method](url, eventHandler(makeEventHandler(entry, trustProxy)))\n        }\n      }\n    },\n\n    useConnect(app, mw: ConnectMiddleware, opts?: UseConnectOptions) {\n      const { fromNodeMiddleware } = h3()\n      const handler = fromNodeMiddleware(mw)\n      if (opts?.path !== undefined) app.use(opts.path, handler)\n      else app.use(handler)\n    },\n\n    serveStatic(app, prefix, dir) {\n      // `serve-static` (the standalone connect middleware behind express.static)\n      // so the h3 runtime carries no `express` dependency — bridged via\n      // fromNodeMiddleware like any other connect middleware.\n      const serveStatic = peerRequire('serve-static')\n      this.useConnect(app, serveStatic(dir) as ConnectMiddleware, { path: prefix })\n    },\n\n    setNotFound(app, mw: ConnectMiddleware) {\n      // Stash it — the shared router throws a 404 on no match, which `onError`\n      // (createApp) dispatches to this handler (or to the Vite fall-through when\n      // a `next` is present). A post-router `app.use` could never run, since the\n      // terminal router throws before the stack advances.\n      ;(app as { [NOTFOUND_MW]?: ConnectMiddleware })[NOTFOUND_MW] = mw\n    },\n\n    setErrorHandler(app, mw: ConnectMiddleware) {\n      ;(app as { [ERROR_MW]?: ConnectMiddleware })[ERROR_MW] = mw\n    },\n\n    capabilities: {\n      render: false,\n      uploads: true,\n      connectMiddleware: true,\n      nativeBodyParsing: true,\n      http2: true,\n    },\n  }\n}\n\n/**\n * The h3 runtime's engine-native types — what the runtime-typed escape hatches\n * resolve to once the `kick/runtime` typegen emits a `KickRuntimeRegister`\n * augmentation pointing here (spec §4.3b). `AdapterContext.app` / `getRuntimeApp()`\n * become the h3 `App`; `ctx.req` / `ctx.res` the per-request `H3Event` (h3 v1\n * routes everything through the event). Mirrors `ExpressRuntimeTypes`.\n */\n// Resolved conditionally so this file typechecks against EITHER installed h3\n// major: v1 exports `App`; v2 (used by the sibling h3-web runtime) does not.\n// Runtime behavior is untouched — this block is type-only.\ntype H3AppType = typeof import('h3') extends { App: infer A } ? A : unknown\ntype H3EventType = typeof import('h3') extends { H3Event: new (...args: never[]) => infer E }\n  ? E\n  : unknown\n\nexport interface H3RuntimeTypes {\n  request: H3EventType\n  response: H3EventType\n  app: H3AppType\n}\n\n/** Join a mount prefix and a route path; a root path maps to the prefix itself. */\nfunction joinPath(mountPath: string, path: string): string {\n  const a = mountPath.endsWith('/') ? mountPath.slice(0, -1) : mountPath\n  if (path === '/' || path === '') return a === '' ? '/' : a\n  const b = path.startsWith('/') ? path : `/${path}`\n  return `${a}${b}`\n}\n"],"mappings":";;;;;;;;;;6fAwCA,MAAM,YAAc,cAAc,YAAY,GAAG,EAE3C,OAAgB,YAAY,IAAI,EAUhC,KAAO,OAAO,gBAAgB,EAC9B,SAAW,OAAO,mBAAmB,EAKrC,OAAS,OAAO,kBAAkB,EAClC,YAAc,OAAO,sBAAsB,EAC3C,UAAY,OAAO,qBAAqB,EACxC,cAAwB,CAAC,EACzB,aAAe,IAAI,IAAI,CAAC,OAAQ,MAAO,QAAS,QAAQ,CAAC,EAO/D,IAAM,cAAN,KAA+C,CAChB,IAA7B,YAAY,IAAsC,CAArB,KAAA,IAAA,GAAsB,CACnD,OAAO,KAAoB,CAEzB,MADA,MAAK,IAAI,WAAa,KACf,IACT,CACA,KAAK,KAAqB,CAUxB,MAJI,CAAC,KAAK,IAAI,aAAe,CAAC,KAAK,IAAI,UAAU,cAAc,GAC7D,KAAK,IAAI,UAAU,eAAgB,iCAAiC,EAEtE,KAAK,IAAI,IAAI,KAAK,UAAU,IAAI,CAAC,EAC1B,IACT,CACA,KAAK,KAAqB,CAExB,OADA,KAAK,IAAI,IAAI,IAAa,EACnB,IACT,CACA,KAAK,YAA2B,CAE9B,OADA,KAAK,IAAI,UAAU,eAAgB,WAAW,EACvC,IACT,CACA,UAAU,KAAc,MAAsB,CAE5C,OADA,KAAK,IAAI,UAAU,KAAM,KAAc,EAChC,IACT,CACA,QAAgB,CACd,MAAU,MAAM,mEAAmE,CACrF,CACA,UAAU,WAAoB,QAA4D,CAExF,OADA,KAAK,IAAI,UAAU,WAAY,OAAO,EAC/B,IACT,CACA,cAAqB,CAEnB,OADA,KAAK,IAAI,aAAa,EACf,IACT,CACA,MAAM,MAAyB,CAC7B,OAAO,KAAK,IAAI,MAAM,KAAc,CACtC,CACA,IAAI,KAAsB,CAExB,OADA,KAAK,IAAI,IAAI,IAAa,EACnB,IACT,CACA,KAAK,MAAe,SAA8C,CAEhE,OADA,KAAK,IAAI,KAAK,MAAO,QAAQ,EACtB,IACT,CACA,IAAI,aAAuB,CACzB,OAAO,KAAK,IAAI,WAClB,CACF,EAEA,SAAS,UAAU,IAAsC,CACvD,OAAO,IAAI,cAAc,GAAG,CAC9B,CAGA,MAAM,YAAc,OAAO,sBAAsB,EAGjD,SAAS,iBACP,MACA,WACuC,CACvC,GAAM,CAAE,gBAAiB,SAAU,YAAa,uBAA0B,GAAG,EACvE,OAAS,MAAM,KAAK,OAGpB,UAAY,MAAM,KAAK,WAAa,SAAS,MAAM,KAAK,UAAU,EAAI,IAAA,GAC5E,OAAO,KAAO,QAAuB,CACnC,IAAM,IAAM,MAAM,KAAK,IAQjB,IAAM,MAAM,KAAK,IASvB,GAAI,YAAc,CAAE,IAAwB,GAAI,CAC9C,IAAM,UAAY,IAAI,QAAQ,mBACxB,OAAS,MAAM,QAAQ,SAAS,EAAI,UAAU,GAAK,UAAA,EAAY,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EACrF,QAAO,IAAyB,GAAK,MAC3C,CAkBA,GAfA,IAAI,OAAS,gBAAgB,KAAK,GAAK,CAAC,EACxC,IAAI,MAAQ,SAAS,KAAK,GAAK,CAAC,EAQ9B,IAAI,mBAAqB,GACzB,IAAI,QAAQ,oBAAsB,IAAA,IAClC,aAAa,IAAI,IAAI,QAAU,KAAK,IAEnC,IAA8B,QAAU,MAAM,iBAAiB,GAAG,GAEjE,QAAU,OAAO,OAAS,OAAQ,CAIpC,IAAM,KAAQ,MAAM,sBAAsB,KAAK,CAAC,CAAC,UAAY,IAAA,EAAS,EAGhE,SAA4B,CAAC,EAC7B,OAAkC,CAAC,EACzC,IAAK,IAAM,QAAQ,MAAQ,CAAC,EACtB,KAAK,SACP,SAAS,KAAK,CACZ,UAAW,KAAK,MAAQ,GACxB,SAAU,KAAK,SACf,SAAU,KAAK,MAAQ,2BACvB,OAAQ,KAAK,IACf,CAAC,EACQ,KAAK,OACd,OAAO,KAAK,MAAQ,KAAK,KAAK,SAAS,OAAO,GAGlD,GAAM,CAAE,KAAM,OAAU,kBAAkB,SAAU,MAAM,EAC1D,IAAI,KAAO,KACX,IAAI,MAAQ,MACZ,IAAI,KAAO,MACb,MAAO,GAAI,aAAa,IAAI,IAAI,QAAU,KAAK,EAAG,CAShD,GAAM,CAAE,iBAAkB,OAAQ,oBAAqB,UAAa,IAAI,QAKxE,GAHE,WAAa,IAAA,IACZ,SAAW,IAAA,IAAa,SAAW,KACnC,IAAI,mBAAqB,GAAK,SAAW,IAC9B,CAMZ,IAAM,KAAO,kBAAkB,IAAI,QAAQ,eAAe,EAC1D,GAAI,OAAS,YAAa,CACxB,IAAM,IAAM,MAAM,YAAY,MAAO,MAAM,EAK3C,GAAI,IAAK,CACP,GAAI,OAAS,cAIX,MAAM,0BAA0B,IAAI,QAAQ,eAAe,EAE7D,GAAI,OAAS,OACX,GAAI,CACF,IAAI,KAAO,KAAK,MAAM,GAAG,CAC3B,OAAS,IAAK,CACZ,MAAM,cAAc,WAClB,eAAe,MAAQ,IAAI,QAAU,kCACvC,CACF,KACK,CAGL,IAAI,KAHK,OAAS,aACP,OAAO,YAAY,IAAI,gBAAgB,GAAG,CAAC,EAE3C,GAEf,CACF,CACF,CACF,CAEA,IAAM,SAAW,IAAI,QAAQ,gBACvB,WAAa,MAAM,QAAQ,QAAQ,EAAI,SAAS,GAAK,WAAa,IAAI,UACtE,MAAQ,mBAAmB,SAAS,EAC1C,IAAI,UAAY,MAAM,UAItB,IAAI,KAAK,YAAe,oBAAoB,KAAK,CAAC,EAElD,MAAM,aAAa,IAAI,MAAO,SAAY,CACxC,oBAAoB,IAAK,KAAK,EAC9B,IAAM,IAAM,IAAI,eAAe,IAAc,IAAc,UAAW,UAAU,GAAG,CAAC,EAGpF,GAAI,MAAM,yBACR,MAAM,MAAM,uBAAuB,GAAG,EAClC,IAAI,eAAe,OAGrB,WACF,MAAM,IAAI,SAAe,QAAS,SAAW,CAC3C,UAAU,IAAc,IAAA,GAAqB,KAC3C,IAAM,OAAO,GAAG,EAAI,QAAQ,CAC9B,CACF,CAAC,EAGH,IAAK,IAAM,MAAM,MAAM,YAAa,CAClC,IAAI,SAAW,GASf,GARA,MAAM,IAAI,SAAe,QAAS,SAAW,CAM3C,QAAQ,QAAQ,GAAG,IALL,KAAwB,CACpC,SAAW,GACP,IAAK,OAAO,GAAG,EACd,QAAQ,CACf,CAC4B,CAAC,CAAC,CAAC,MAAM,MAAM,CAC7C,CAAC,EACG,CAAC,UAAY,IAAI,cAAe,MACtC,CAGA,GADI,MAAM,mBAAmB,MAAM,MAAM,kBAAkB,GAAG,EAC1D,IAAI,cAAe,OACvB,IAAM,OAAS,MAAM,MAAM,QAAQ,GAAG,EAElC,CAAC,IAAI,eAAiB,CAAC,IAAI,aAAa,mBAAmB,IAAK,MAAM,CAC5E,CAAC,CACH,CACF,CAgBA,SAAS,cAAc,MAAyB,CAC9C,GAAI,EAAE,iBAAiB,OAAQ,OAAO,MACtC,GAAM,CAAE,OAAU,MAClB,OAAO,iBAAiB,MAAQ,MAAQ,KAC1C,CAQA,eAAe,iBAAiB,IAAsD,CACpF,IAAM,OAAmB,CAAC,EAC1B,UAAW,IAAM,SAAS,IAAK,OAAO,KAAK,OAAO,OAAU,SAAW,OAAO,KAAK,KAAK,EAAI,KAAK,EACjG,OAAO,OAAO,OAAO,MAAM,CAC7B,CAEA,SAAgB,WAAoC,CAClD,MAAO,CACL,KAAM,KAEN,UAAU,QAA6B,CAAC,EAAc,CACpD,GAAM,CAAE,WAAc,GAAG,EACnB,IAAM,UAAU,CACpB,SAAU,MAAgB,QAAuB,CAC/C,IAAM,IAAM,MAAM,KAAK,IACvB,GAAI,IAAI,cAAe,OACvB,IAAM,MAAQ,IAeR,OAAU,OAA+C,WACzD,gBAAmB,OAA2C,iBAAiB,MACrF,GAAI,SAAW,KAAO,CAAC,gBAAiB,CACtC,IAAM,KAAQ,MAAM,KAAK,IAAkD,MAC3E,GAAI,KAAM,CACR,KAAK,EACL,MACF,CACA,IAAM,GAAK,MAAM,aACjB,GAAI,GAAI,CACL,GACC,MAAM,KAAK,IACX,UAAU,GAAG,EACb,SACF,EACA,MACF,CACF,CACA,IAAM,GAAK,MAAM,UACb,IACD,GACC,cAAc,KAAK,EACnB,MAAM,KAAK,IACX,UAAU,GAAG,EACb,SACF,CAEJ,CACF,CAAC,EAID,MADC,KAAqC,aAAe,QAAQ,WACtD,GACT,EAEA,YAAY,IAAK,CACf,GAAM,CAAE,gBAAmB,GAAG,EAKxB,MAAQ,IACT,MAAM,aACT,MAAM,WAAa,GACf,MAAM,SAAS,IAAI,IAAI,MAAM,OAAO,GAE1C,IAAM,SAAW,eAAe,GAAG,EACnC,OAAQ,IAAsB,IAAqB,OAAmC,CAChF,OAAM,IAAgE,MAAQ,MAClF,QAAQ,QAAQ,SAAS,IAAK,GAAG,CAAC,CAAC,CAAC,MAAO,KAAQ,CAC7C,MAAM,KAAK,GAAG,CACpB,CAAC,CACH,CACF,EAEA,YAAY,IAAK,MAAmB,CAClC,GAAM,CAAE,aAAc,cAAiB,GAAG,EACpC,WAAa,EAAS,IAAoC,aAI1D,MAAQ,IACT,MAAM,UAAS,MAAM,QAAU,aAAa,GACjD,IAAM,OAAS,MAAM,QACrB,IAAK,GAAM,CAAE,UAAW,UAAY,MAClC,IAAK,IAAM,SAAS,OAAQ,CAC1B,IAAM,IAAM,SAAS,UAAW,MAAM,IAAI,EAE1C,OADe,MAAM,OAAO,YAChB,EAAE,CAAC,IAAK,aAAa,iBAAiB,MAAO,UAAU,CAAC,CAAC,CACvE,CAEJ,EAEA,WAAW,IAAK,GAAuB,KAA0B,CAC/D,GAAM,CAAE,oBAAuB,GAAG,EAC5B,QAAU,mBAAmB,EAAE,EACjC,MAAM,OAAS,IAAA,GACd,IAAI,IAAI,OAAO,EADU,IAAI,IAAI,KAAK,KAAM,OAAO,CAE1D,EAEA,YAAY,IAAK,OAAQ,IAAK,CAI5B,IAAM,YAAc,YAAY,cAAc,EAC9C,KAAK,WAAW,IAAK,YAAY,GAAG,EAAwB,CAAE,KAAM,MAAO,CAAC,CAC9E,EAEA,YAAY,IAAK,GAAuB,CAKrC,IAA+C,aAAe,EACjE,EAEA,gBAAgB,IAAK,GAAuB,CACzC,IAA4C,UAAY,EAC3D,EAEA,aAAc,CACZ,OAAQ,GACR,QAAS,GACT,kBAAmB,GACnB,kBAAmB,GACnB,MAAO,EACT,CACF,CACF,CAwBA,SAAS,SAAS,UAAmB,KAAsB,CACzD,IAAM,EAAI,UAAU,SAAS,GAAG,EAAI,UAAU,MAAM,EAAG,EAAE,EAAI,UAG7D,OAFI,OAAS,KAAO,OAAS,GAAW,IAAM,GAAK,IAAM,EAElD,GAAG,IADA,KAAK,WAAW,GAAG,EAAI,KAAO,IAAI,QAE9C"}

package/dist/{index-Btz1W0X5.d.mts → index-ClP0EE9p.d.mts}

@@ -1,5 +1,5 @@
 
-import { p as EnvKey } from "./decorators-mg0qJ6Qc.mjs";
+import { p as EnvKey } from "./decorators-DOcWsXci.mjs";
 import { InferSchemaOutput } from "@forinda/kickjs-schema";
 import { z } from "zod";
 //#region src/config/env.d.ts
@@ -301,4 +301,4 @@ declare function createConfigService<T extends z.ZodObject<any>>(schema: T): {
 };
 //#endregion
 export { baseEnvSchema as a, loadEnv as c, resetEnvCache as d, Env as i, loadEnvFromSchema as l, TypedConfigService as n, defineEnv as o, createConfigService as r, getEnv as s, ConfigService as t, reloadEnv as u };
-//# sourceMappingURL=index-Btz1W0X5.d.mts.map
+//# sourceMappingURL=index-ClP0EE9p.d.mts.map

package/dist/{index-Btz1W0X5.d.mts.map → index-ClP0EE9p.d.mts.map}

@@ -1 +1 @@
-{"version":3,"file":"index-Btz1W0X5.d.mts","names":[],"sources":["../src/config/env.ts","../src/config/config-service.ts"],"mappings":";;;;;;;;;;iBAsOS,sBAAkB,EAAA;;;;;;;;GAQ1B,EAAA,KAAA;;KAGW,gBAAgB,kBAAkB;;;;;;;;;;;cAsBjC,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA8CZ,UAAU,UAAU,EAAE,aACpC,SAAS,aAAa,kBAAkB,EAAE,UAAU,KACnD,EAAE,iBAAiB,cAAc,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;iBAgC5B,QAAQ,UAAU,EAAE,gBAAgB,QAAQ,IAAI,EAAE,MAAM;iBACxD,YAAY,0BAA0B,MAAM;;;;;;;;;;;;;;;;;;;;;;iBAqC5C,OAAO,UAAU,QAAQ,KAAK,IAAI,QAAQ;iBAC1C,OAAO,UAAU,EAAE,gBAAgB,yBAAyB,EAAE,MAAM,IAClF,KAAK,GACL,QAAQ,IACP,EAAE,MAAM,GAAG;;;;;;;;;;;;;;;;iBAqBE;;;;;;;iBA8BA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA+CA,kBAAkB,SAChC,QAAQ,0BACS,UAAU,0BAA0B,kBAAkB;;;;;;;;KAuB7D;EACV;EACA;EACA;;;;;;;;;;;KCnfG,UAAU,qBAAqB,0BAA0B,IAAI,IAAI;;;;;;;KAQjE,YAAY,kBAAkB,KAAK,UAAU,SAAS,QAAQ,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;cA2B3D;;;;;;;;;;;;;;cAcC;;;;;;;;;;EAaZ,IAAI,kBAAkB,SAAS,KAAK,UAAU,KAAK,YAAY,GAAG;;;;;;EASlE,WAAW,0BAA0B,SAAS,uBAAuB,SAAS;;EAK9E;EAMA;EAIA;EAIA;;;;;;UASe,mBAAmB,aAAa;EAC/C,IAAI,yBAAyB,MAAM,KAAK,IAAI,KAAK;EACjD,UAAU,SAAS;EACnB;EACA;EACA;EACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA+Bc,oBAAoB,UAAU,EAAE,gBAAgB,QAAQ;UAqC5D,mBAAkB,EAAA,MAAA"}
+{"version":3,"file":"index-ClP0EE9p.d.mts","names":[],"sources":["../src/config/env.ts","../src/config/config-service.ts"],"mappings":";;;;;;;;;;iBAsOS,sBAAkB,EAAA;;;;;;;;GAQ1B,EAAA,KAAA;;KAGW,gBAAgB,kBAAkB;;;;;;;;;;;cAsBjC,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA8CZ,UAAU,UAAU,EAAE,aACpC,SAAS,aAAa,kBAAkB,EAAE,UAAU,KACnD,EAAE,iBAAiB,cAAc,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;iBAgC5B,QAAQ,UAAU,EAAE,gBAAgB,QAAQ,IAAI,EAAE,MAAM;iBACxD,YAAY,0BAA0B,MAAM;;;;;;;;;;;;;;;;;;;;;;iBAqC5C,OAAO,UAAU,QAAQ,KAAK,IAAI,QAAQ;iBAC1C,OAAO,UAAU,EAAE,gBAAgB,yBAAyB,EAAE,MAAM,IAClF,KAAK,GACL,QAAQ,IACP,EAAE,MAAM,GAAG;;;;;;;;;;;;;;;;iBAqBE;;;;;;;iBA8BA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA+CA,kBAAkB,SAChC,QAAQ,0BACS,UAAU,0BAA0B,kBAAkB;;;;;;;;KAuB7D;EACV;EACA;EACA;;;;;;;;;;;KCnfG,UAAU,qBAAqB,0BAA0B,IAAI,IAAI;;;;;;;KAQjE,YAAY,kBAAkB,KAAK,UAAU,SAAS,QAAQ,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;cA2B3D;;;;;;;;;;;;;;cAcC;;;;;;;;;;EAaZ,IAAI,kBAAkB,SAAS,KAAK,UAAU,KAAK,YAAY,GAAG;;;;;;EASlE,WAAW,0BAA0B,SAAS,uBAAuB,SAAS;;EAK9E;EAMA;EAIA;EAIA;;;;;;UASe,mBAAmB,aAAa;EAC/C,IAAI,yBAAyB,MAAM,KAAK,IAAI,KAAK;EACjD,UAAU,SAAS;EACnB;EACA;EACA;EACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA+Bc,oBAAoB,UAAU,EAAE,gBAAgB,QAAQ;UAqC5D,mBAAkB,EAAA,MAAA"}

package/dist/index.d.mts

@@ -1,29 +1,29 @@
 
 import { a as METADATA, c as Scope, i as Constructor, l as ServiceOptions, n as BuilderOf, o as MaybePromise, r as ClassKind, s as PostConstructStatus, t as Buildable } from "./interfaces-C1hCSoLD.mjs";
 import { a as tokenName, c as createToken, i as KickJsRegistry, l as isInjectionToken, n as ContainerChangeEvent, o as INJECTION_TOKEN, r as ContainerChangeListener, s as InjectionToken, t as Container } from "./container-Dpvd66Yt.mjs";
-import { A as Service, B as resolveAsset, C as Post, D as Put, F as ASSET_MANIFEST_VERSION, I as KickAssets, L as UnknownAssetError, M as normalizeApiQueryParamsConfig, N as withBuilder, O as Repository, P as ASSETS, R as assets, S as Patch, T as PreDestroy, V as useAssets, _ as Get, a as Autowired, b as Middleware, c as ColumnApiQueryParamsConfig, d as Delete, f as Env, g as FileUploadConfig, h as FileUpload, i as AssetKey, j as Value, k as RouteDefinition, l as Component, m as FileTypeFilter, n as ApiQueryParamsConfig, o as BaseUploadOptions, p as EnvKey, r as Asset, s as Builder, t as ApiQueryParams, u as Controller, v as Inject, w as PostConstruct, x as MiddlewareHandler, y as Injectable, z as clearAssetCache } from "./decorators-mg0qJ6Qc.mjs";
-import { a as baseEnvSchema, c as loadEnv, d as resetEnvCache, l as loadEnvFromSchema, n as TypedConfigService, o as defineEnv, r as createConfigService, s as getEnv, t as ConfigService, u as reloadEnv } from "./index-Btz1W0X5.mjs";
+import { A as Service, B as resolveAsset, C as Post, D as Put, F as ASSET_MANIFEST_VERSION, I as KickAssets, L as UnknownAssetError, M as normalizeApiQueryParamsConfig, N as withBuilder, O as Repository, P as ASSETS, R as assets, S as Patch, T as PreDestroy, V as useAssets, _ as Get, a as Autowired, b as Middleware, c as ColumnApiQueryParamsConfig, d as Delete, f as Env, g as FileUploadConfig, h as FileUpload, i as AssetKey, j as Value, k as RouteDefinition, l as Component, m as FileTypeFilter, n as ApiQueryParamsConfig, o as BaseUploadOptions, p as EnvKey, r as Asset, s as Builder, t as ApiQueryParams, u as Controller, v as Inject, w as PostConstruct, x as MiddlewareHandler, y as Injectable, z as clearAssetCache } from "./decorators-DOcWsXci.mjs";
+import { a as baseEnvSchema, c as loadEnv, d as resetEnvCache, l as loadEnvFromSchema, n as TypedConfigService, o as defineEnv, r as createConfigService, s as getEnv, t as ConfigService, u as reloadEnv } from "./index-ClP0EE9p.mjs";
+import { $ as setMethodMeta, A as AdapterAsyncOptions, B as buildPipeline, C as RuntimeTypeMap, Ct as reportError, D as RequestContext, E as DeepReadonly, F as runContributors, G as getMethodMeta, H as getClassMetaOrUndefined, I as BuildPipelineOptions, J as pushClassMeta, K as getMethodMetaOrUndefined, L as ContributorPipeline, M as DefineAdapterOptions, N as defineAdapter, O as RouteShape, P as RunContributorsOptions, Q as setInMetaRecord, R as ContributorSource, S as RuntimeResponse, St as ResponseInfo, T as Ctx, U as getMetaMap, V as getClassMeta, W as getMetaRecord, X as setClassMeta, Y as pushMethodMeta, Z as setInMetaMap, _ as RouteMeta, _t as IntrospectFn, a as KickServer, at as BuildContext, b as RuntimeAppOptions, bt as ErrorInfo, c as ActiveRuntime, ct as PluginFactory, d as CtxHandler, dt as ModuleRegistry, et as ModuleList, f as ExpressRuntimeTypes, ft as MutableModuleRegistry, g as RouteEntry, gt as defineAugmentation, h as MatchedRoute, ht as KickJsPluginRegistry, i as AppAdapterClass, it as defineModule, j as AdapterFactory, k as SseHandler, l as AdapterHttp, lt as definePlugin, m as KickRuntimeRegister, mt as KickJsPluginName, n as AdapterMiddleware, nt as DefineModuleOptions, o as MiddlewarePath, ot as DefinePluginOptions, p as HttpRuntime, pt as AugmentationMeta, q as hasClassMeta, r as AppAdapter, rt as ModuleFactory, s as MiddlewarePhase, st as PluginAsyncOptions, t as AdapterContext, tt as defineModules, u as ConnectMiddleware, ut as KickPlugin, v as RouteMethod, vt as IntrospectionKind, w as UseConnectOptions, wt as reportResponse, x as RuntimeCapabilities, xt as ErrorSource, y as RouteTable, yt as IntrospectionSnapshot, z as SourcedRegistration } from "./adapter-DK8WDonT.mjs";
 import { _ as getRouteFlags, a as RouteFlagContext, c as RouteFlagName, d as RouteFlagTest, f as RouteFlagValue, g as defineRouteFlag, h as assertFlagTest, i as RouteFlag, l as RouteFlagPredicate, m as ValuedRouteFlag, n as KickRouteFlags, o as RouteFlagDeclaration, p as RouteFlags, r as NegatedRouteFlagName, s as RouteFlagDeclarations, t as BareRouteFlag, u as RouteFlagRecord, v as matchesFlagTest, y as resolveRouteFlags } from "./route-flag-B1lQht6v.mjs";
 import { C as MetaValue, S as ExecutionContext, _ as ResolvedDeps, a as ModuleRoutes, b as ContextMeta, c as ContextDecorator, d as ContextDecoratorTarget, f as ContextDecoratorWithDefaults, g as MissingParamKeys, h as DepValue, l as ContextDecoratorRequiringParams, m as ContributorRegistrations, n as AppModuleClass, o as AnyContributorRegistration, p as ContributorRegistration, r as AppModuleEntry, s as CallSiteParams, t as AppModule, u as ContextDecoratorSpec, v as defineContextDecorator, x as ContextMetaKey, y as ContextKeys } from "./app-module-DCA65GZZ.mjs";
-import { $ as ModuleList, A as AdapterFactory, B as getClassMeta, C as UseConnectOptions, D as RouteShape, E as RequestContext, F as BuildPipelineOptions, G as getMethodMetaOrUndefined, H as getMetaMap, I as ContributorPipeline, J as pushMethodMeta, K as hasClassMeta, L as ContributorSource, M as defineAdapter, N as RunContributorsOptions, O as SseHandler, P as runContributors, Q as setMethodMeta, R as SourcedRegistration, S as RuntimeTypeMap, T as DeepReadonly, U as getMetaRecord, V as getClassMetaOrUndefined, W as getMethodMeta, X as setInMetaMap, Y as setClassMeta, Z as setInMetaRecord, _ as RouteMethod, _t as IntrospectionKind, a as MiddlewarePath, at as DefinePluginOptions, b as RuntimeCapabilities, c as AdapterHttp, ct as definePlugin, d as ExpressRuntimeTypes, dt as MutableModuleRegistry, et as defineModules, f as HttpRuntime, ft as AugmentationMeta, g as RouteMeta, gt as IntrospectFn, h as RouteEntry, ht as defineAugmentation, i as AppAdapterClass, it as BuildContext, j as DefineAdapterOptions, k as AdapterAsyncOptions, l as ConnectMiddleware, lt as KickPlugin, m as MatchedRoute, mt as KickJsPluginRegistry, n as AdapterMiddleware, nt as ModuleFactory, o as MiddlewarePhase, ot as PluginAsyncOptions, p as KickRuntimeRegister, pt as KickJsPluginName, q as pushClassMeta, r as AppAdapter, rt as defineModule, s as ActiveRuntime, st as PluginFactory, t as AdapterContext, tt as DefineModuleOptions, u as CtxHandler, ut as ModuleRegistry, v as RouteTable, vt as IntrospectionSnapshot, w as Ctx, x as RuntimeResponse, y as RuntimeAppOptions, z as buildPipeline } from "./adapter-2bnoYEPX.mjs";
-import { i as getCronJobs, n as Cron, r as CronJobMeta, t as CRON_META } from "./cron-DOOtTY4q.mjs";
+import { a as CronOptions, c as getCronJobs, d as runCronJob, f as runCronJobs, i as CronJobMeta, l as isCronJobEnabled, n as Cron, o as CronRun, r as CronJob, s as cronScheduleId, t as CRON_META, u as listCronJobs } from "./cron-BTGytNg-.mjs";
 import { a as Cacheable, c as setCacheProvider, i as CacheProvider, n as CacheEvict, o as MemoryCacheProvider, r as CacheOptions, s as getCacheProvider } from "./cache-C0qL0NSD.mjs";
 import { a as describeError, i as createLogger, n as Logger, r as LoggerProvider, t as ConsoleLoggerProvider } from "./logger-DA43DvNY.mjs";
-import { $ as MissingContributorError, A as ClusterOptions, B as GroupAssetKeysOptions, C as getRequestStore, D as expressRuntime, E as buildRoutes, F as RoutePolicyTable, G as MissingMountDepError, H as groupAssetKeys, I as bindRoutePolicy, J as MountSortItem, K as MountCycleError, L as offerRoutePolicy, M as KickHandler, N as createHandler, O as materializeRouter, P as bootstrap, Q as MissingContextValueError, R as AssetKeyPair, S as RequestStore, T as requestStore, U as stripExt, V as GroupAssetKeysResult, W as DuplicateMountNameError, X as ContributorCycleError, Y as mountSort, Z as DuplicateContributorError, _ as TraceContext, a as HEALTH_PROBE, at as FormatKickErrorOptions, b as traceContext, c as HealthModuleConfig, ct as formatKickError, d as SpaAdapter, dt as registerDisposable, et as CircuitBreaker, f as SpaAdapterOptions, g as TRACEPARENT_HEADER, h as ViewAdapterOptions, it as CircuitOpenError, j as isClusterPrimary, k as defineHttpContextDecorator, l as HealthProbe, lt as Disposable, m as ViewAdapter, n as ApplicationOptions, nt as CircuitBreakerState, o as HealthCheckResult, ot as KickError, q as MountKind, r as MiddlewareEntry, rt as CircuitBreakerStats, s as HealthController, st as KickErrorInit, t as Application, tt as CircuitBreakerOptions, u as healthModule, ut as disposeAll, v as TraceContextOptions, w as getRequestValue, x as requestScopeMiddleware, y as parseTraceparent, z as AssetKeyStrategy } from "./application-_QOiAVx2.mjs";
+import { $ as MissingMountDepError, A as defineHttpContextDecorator, B as CRON_WORKER_ENV, C as RequestStore, D as buildRoutes, E as requestStore, F as bootstrap, G as offerRoutePolicy, H as KickCronAdapter, I as ERROR_CHANNEL, J as GroupAssetKeysOptions, K as AssetKeyPair, L as HANDLER_CHANNEL, M as isClusterPrimary, N as KickHandler, O as expressRuntime, P as createHandler, Q as DuplicateMountNameError, R as HandlerTraceContext, S as requestScopeMiddleware, T as getRequestValue, U as RoutePolicyTable, V as CronAdapterOptions, W as bindRoutePolicy, X as groupAssetKeys, Y as GroupAssetKeysResult, Z as stripExt, _ as TRACEPARENT_HEADER, _t as Disposable, at as DuplicateContributorError, b as parseTraceparent, c as HealthController, ct as CircuitBreaker, d as healthModule, dt as CircuitBreakerStats, et as MountCycleError, f as SpaAdapter, ft as CircuitOpenError, g as ViewAdapterOptions, gt as formatKickError, h as ViewAdapter, ht as KickErrorInit, i as ServerOptions, it as ContributorCycleError, j as ClusterOptions, k as materializeRouter, l as HealthModuleConfig, lt as CircuitBreakerOptions, mt as KickError, n as ApplicationOptions, nt as MountSortItem, o as HEALTH_PROBE, ot as MissingContextValueError, p as SpaAdapterOptions, pt as FormatKickErrorOptions, q as AssetKeyStrategy, r as MiddlewareEntry, rt as mountSort, s as HealthCheckResult, st as MissingContributorError, t as Application, tt as MountKind, u as HealthProbe, ut as CircuitBreakerState, v as TraceContext, vt as disposeAll, w as getRequestStore, x as traceContext, y as TraceContextOptions, yt as registerDisposable, z as RESPONSE_CHANNEL } from "./application-B6Gp1nqK.mjs";
 import { a as ProblemException, c as defaultProblemTitle, i as ProblemDetails, l as normalizeProblem, n as HttpStatus, o as Problems, r as HttpStatusCode, s as ValidationError, t as HttpException } from "./errors-By6UueCm.mjs";
 import { n as joinPaths, r as normalizePath, t as buildMountPath } from "./path-CMwIHsdv.mjs";
 import { a as isRef, c as toRefs, i as computed, l as unref, n as Ref, o as reactive, r as WatchOptions, s as ref, t as ComputedRef, u as watch } from "./reactivity-BkMNA0kp.mjs";
 import { C as SortItem, S as QueryFieldConfig, T as TypedParsedQuery, _ as FilterOperator, a as getQueryParsingDefaults, b as ParsedQuery, c as parseQuery, d as resetQueryParsingDefaults, f as setQueryParsingDefaults, g as FilterItem, h as FieldsOf, i as buildQueryParams, l as parseSearchQuery, m as FILTER_OPERATORS, n as QueryRejectReason, o as parseFilters, r as QueryRejection, s as parsePagination, t as ParseQueryOptions, u as parseSort, v as PaginatedResponse, x as QueryBuilderAdapter, y as PaginationParams } from "./index-BfT5KZ-M.mjs";
-import { a as KvSessionStoreOptions, c as InferHandlerResponse, d as isReply, f as reply, i as KvSessionStore, l as Reply, n as KvRateLimitStore, o as RateLimitGuardOptions, r as KvRateLimitStoreOptions, s as rateLimitGuard, t as KvLike, u as applyHandlerResult } from "./kv-stores-Dx5RvIaP.mjs";
-import { i as buildRouteTable, t as BuildRoutesOptions } from "./router-builder-C6gmK0nZ.mjs";
+import { a as KvSessionStoreOptions, c as InferHandlerResponse, d as isReply, f as reply, h as waitUntil, i as KvSessionStore, l as Reply, m as settleBackgroundWork, n as KvRateLimitStore, o as RateLimitGuardOptions, p as PlatformContext, r as KvRateLimitStoreOptions, s as rateLimitGuard, t as KvLike, u as applyHandlerResult } from "./kv-stores-B-1WZ2Fh.mjs";
+import { i as buildRouteTable, t as BuildRoutesOptions } from "./router-builder-CUs9Gq4X.mjs";
 import { n as requestId, t as REQUEST_ID_HEADER } from "./request-id-CVzJ1uHD.mjs";
 import { n as validate } from "./validate-DMYpUnrf.mjs";
-import { n as errorHandler, r as notFoundHandler } from "./error-handler-C1uWVGVY.mjs";
-import { i as csrfGuard, n as CsrfOptions, r as csrf, t as CsrfGuardOptions } from "./csrf-C4MwaMp4.mjs";
+import { n as errorHandler, r as notFoundHandler } from "./error-handler-DxF2EogM.mjs";
+import { i as csrfGuard, n as CsrfOptions, r as csrf, t as CsrfGuardOptions } from "./csrf-COFjRrUz.mjs";
 import { i as requestLogger, n as LoggedResponse, r as RequestLoggerOptions, t as LoggedRequest } from "./request-logger-TgcKRNDD.mjs";
 import { n as HelmetOptions, r as helmet } from "./helmet-C2QEU6S-.mjs";
 import { n as cors, t as CorsOptions } from "./cors-CsibNTQ6.mjs";
 import { n as RateLimitStore, r as rateLimit, t as RateLimitOptions } from "./rate-limit-Bwed3jOV.mjs";
 import { a as session, i as SessionStore, n as SessionData, r as SessionOptions, t as Session } from "./session-BHgRyfqZ.mjs";
-import { i as upload, l as resolveMimeTypes, n as buildUploadMiddleware, r as cleanupFiles, t as UploadOptions } from "./upload-TW2ZuECF.mjs";
-export { ASSETS, ASSET_MANIFEST_VERSION, type ActiveRuntime, type AdapterAsyncOptions, type AdapterContext, type AdapterFactory, type AdapterHttp, type AdapterMiddleware, type AnyContributorRegistration, ApiQueryParams, type ApiQueryParamsConfig, type ApiQueryParamsConfig as QueryParamsConfig, type AppAdapter, type AppAdapterClass, type AppModule, type AppModuleClass, type AppModuleEntry, Application, type ApplicationOptions, Asset, type AssetKey, type AssetKeyPair, type AssetKeyStrategy, type AugmentationMeta, Autowired, type BareRouteFlag, type BaseUploadOptions, type BuildContext, type BuildPipelineOptions, type BuildRoutesOptions, type Buildable, Builder, type BuilderOf, CRON_META, CacheEvict, type CacheOptions, type CacheProvider, Cacheable, type CallSiteParams, CircuitBreaker, type CircuitBreakerOptions, type CircuitBreakerState, type CircuitBreakerStats, CircuitOpenError, type ClassKind, type ClusterOptions, type ColumnApiQueryParamsConfig, Component, type ComputedRef, ConfigService, type ConnectMiddleware, ConsoleLoggerProvider, type Constructor, Container, type ContainerChangeEvent, type ContainerChangeListener, type ContextDecorator, type ContextDecoratorRequiringParams, type ContextDecoratorSpec, type ContextDecoratorTarget, type ContextDecoratorWithDefaults, type ContextKeys, type ContextMeta, type ContextMetaKey, ContributorCycleError, type ContributorPipeline, type ContributorRegistration, type ContributorRegistrations, type ContributorSource, Controller, type CorsOptions, Cron, type CronJobMeta, type CsrfGuardOptions, type CsrfOptions, type Ctx, type CtxHandler, type DeepReadonly, type DefineAdapterOptions, type DefineModuleOptions, type DefinePluginOptions, Delete, type DepValue, type Disposable, DuplicateContributorError, DuplicateMountNameError, type Env, type EnvKey, type ExecutionContext, type ExpressRuntimeTypes, FILTER_OPERATORS, type FieldsOf, type FileTypeFilter, FileUpload, type FileUploadConfig, type FilterItem, type FilterOperator, type FormatKickErrorOptions, Get, type GroupAssetKeysOptions, type GroupAssetKeysResult, HEALTH_PROBE, type HealthCheckResult, HealthController, type HealthModuleConfig, type HealthProbe, type HelmetOptions, HttpException, type HttpRuntime, HttpStatus, type HttpStatusCode, INJECTION_TOKEN, type InferHandlerResponse, Inject, Injectable, type InjectionToken, type IntrospectFn, type IntrospectionKind, type IntrospectionSnapshot, type KickAssets, KickError, type KickErrorInit, type KickHandler, type KickJsPluginName, type KickJsPluginRegistry, type KickJsRegistry, type KickPlugin, type KickRouteFlags, type KickRuntimeRegister, type KvLike, KvRateLimitStore, type KvRateLimitStoreOptions, KvSessionStore, type KvSessionStoreOptions, type LoggedRequest, type LoggedResponse, Logger, type LoggerProvider, METADATA, type MatchedRoute, type MaybePromise, MemoryCacheProvider, type MetaValue, Middleware, type MiddlewareEntry, type MiddlewareHandler, type MiddlewarePath, type MiddlewarePhase, MissingContextValueError, MissingContributorError, MissingMountDepError, type MissingParamKeys, type ModuleFactory, ModuleList, type ModuleRegistry, type ModuleRoutes, MountCycleError, type MountKind, type MountSortItem, MutableModuleRegistry, type NegatedRouteFlagName, type PaginatedResponse, type PaginationParams, type ParseQueryOptions, type ParsedQuery, Patch, type PluginAsyncOptions, type PluginFactory, Post, PostConstruct, type PostConstructStatus, PreDestroy, type ProblemDetails, ProblemException, Problems, Put, type QueryBuilderAdapter, type QueryFieldConfig, type QueryRejectReason, type QueryRejection, REQUEST_ID_HEADER, type RateLimitGuardOptions, type RateLimitOptions, type RateLimitStore, type Ref, type Reply, Repository, RequestContext, type RequestLoggerOptions, type RequestStore, type ResolvedDeps, type RouteDefinition, type RouteEntry, type RouteFlag, type RouteFlagContext, type RouteFlagDeclaration, type RouteFlagDeclarations, type RouteFlagName, type RouteFlagPredicate, type RouteFlagRecord, type RouteFlagTest, type RouteFlagValue, type RouteFlags, type RouteMeta, type RouteMethod, RoutePolicyTable, type RouteShape, type RouteTable, type RunContributorsOptions, type RuntimeAppOptions, type RuntimeCapabilities, type RuntimeResponse, type RuntimeTypeMap, Scope, Service, type ServiceOptions, type Session, type SessionData, type SessionOptions, type SessionStore, type SortItem, type SourcedRegistration, SpaAdapter, type SpaAdapterOptions, type SseHandler, TRACEPARENT_HEADER, type TraceContext, type TraceContextOptions, type TypedConfigService, type TypedParsedQuery, UnknownAssetError, type UploadOptions, type UseConnectOptions, type ValidationError, Value, type ValuedRouteFlag, ViewAdapter, type ViewAdapterOptions, type WatchOptions, applyHandlerResult, assertFlagTest, assets, baseEnvSchema, bindRoutePolicy, bootstrap, buildMountPath, buildPipeline, buildQueryParams, buildRouteTable, buildRoutes, buildUploadMiddleware, cleanupFiles, clearAssetCache, computed, cors, createConfigService, createHandler, createLogger, createToken, csrf, csrfGuard, defaultProblemTitle, defineAdapter, defineAugmentation, defineContextDecorator, defineEnv, defineHttpContextDecorator, defineModule, defineModules, definePlugin, defineRouteFlag, describeError, disposeAll, errorHandler, expressRuntime, formatKickError, getCacheProvider, getClassMeta, getClassMetaOrUndefined, getCronJobs, getEnv, getMetaMap, getMetaRecord, getMethodMeta, getMethodMetaOrUndefined, getQueryParsingDefaults, getRequestStore, getRequestValue, getRouteFlags, groupAssetKeys, hasClassMeta, healthModule, helmet, isClusterPrimary, isInjectionToken, isRef, isReply, joinPaths, loadEnv, loadEnvFromSchema, matchesFlagTest, materializeRouter, mountSort, normalizeApiQueryParamsConfig, normalizePath, normalizeProblem, notFoundHandler, offerRoutePolicy, parseFilters, parsePagination, parseQuery, parseSearchQuery, parseSort, parseTraceparent, pushClassMeta, pushMethodMeta, rateLimit, rateLimitGuard, reactive, ref, registerDisposable, reloadEnv, reply, requestId, requestLogger, requestScopeMiddleware, requestStore, resetEnvCache, resetQueryParsingDefaults, resolveAsset, resolveMimeTypes, resolveRouteFlags, runContributors, session, setCacheProvider, setClassMeta, setInMetaMap, setInMetaRecord, setMethodMeta, setQueryParsingDefaults, stripExt, toRefs, tokenName, traceContext, unref, upload, useAssets, validate, watch, withBuilder };
+import { i as upload, l as resolveMimeTypes, n as buildUploadMiddleware, r as cleanupFiles, t as UploadOptions } from "./upload-BukLMawc.mjs";
+export { ASSETS, ASSET_MANIFEST_VERSION, type ActiveRuntime, type AdapterAsyncOptions, type AdapterContext, type AdapterFactory, type AdapterHttp, type AdapterMiddleware, type AnyContributorRegistration, ApiQueryParams, type ApiQueryParamsConfig, type ApiQueryParamsConfig as QueryParamsConfig, type AppAdapter, type AppAdapterClass, type AppModule, type AppModuleClass, type AppModuleEntry, Application, type ApplicationOptions, Asset, type AssetKey, type AssetKeyPair, type AssetKeyStrategy, type AugmentationMeta, Autowired, type BareRouteFlag, type BaseUploadOptions, type BuildContext, type BuildPipelineOptions, type BuildRoutesOptions, type Buildable, Builder, type BuilderOf, CRON_META, CRON_WORKER_ENV, CacheEvict, type CacheOptions, type CacheProvider, Cacheable, type CallSiteParams, CircuitBreaker, type CircuitBreakerOptions, type CircuitBreakerState, type CircuitBreakerStats, CircuitOpenError, type ClassKind, type ClusterOptions, type ColumnApiQueryParamsConfig, Component, type ComputedRef, ConfigService, type ConnectMiddleware, ConsoleLoggerProvider, type Constructor, Container, type ContainerChangeEvent, type ContainerChangeListener, type ContextDecorator, type ContextDecoratorRequiringParams, type ContextDecoratorSpec, type ContextDecoratorTarget, type ContextDecoratorWithDefaults, type ContextKeys, type ContextMeta, type ContextMetaKey, ContributorCycleError, type ContributorPipeline, type ContributorRegistration, type ContributorRegistrations, type ContributorSource, Controller, type CorsOptions, Cron, type CronAdapterOptions, type CronJob, type CronJobMeta, type CronOptions, type CronRun, type CsrfGuardOptions, type CsrfOptions, type Ctx, type CtxHandler, type DeepReadonly, type DefineAdapterOptions, type DefineModuleOptions, type DefinePluginOptions, Delete, type DepValue, type Disposable, DuplicateContributorError, DuplicateMountNameError, ERROR_CHANNEL, type Env, type EnvKey, type ErrorInfo, type ErrorSource, type ExecutionContext, type ExpressRuntimeTypes, FILTER_OPERATORS, type FieldsOf, type FileTypeFilter, FileUpload, type FileUploadConfig, type FilterItem, type FilterOperator, type FormatKickErrorOptions, Get, type GroupAssetKeysOptions, type GroupAssetKeysResult, HANDLER_CHANNEL, HEALTH_PROBE, type HandlerTraceContext, type HealthCheckResult, HealthController, type HealthModuleConfig, type HealthProbe, type HelmetOptions, HttpException, type HttpRuntime, HttpStatus, type HttpStatusCode, INJECTION_TOKEN, type InferHandlerResponse, Inject, Injectable, type InjectionToken, type IntrospectFn, type IntrospectionKind, type IntrospectionSnapshot, type KickAssets, KickCronAdapter, KickError, type KickErrorInit, type KickHandler, type KickJsPluginName, type KickJsPluginRegistry, type KickJsRegistry, type KickPlugin, type KickRouteFlags, type KickRuntimeRegister, type KickServer, type KvLike, KvRateLimitStore, type KvRateLimitStoreOptions, KvSessionStore, type KvSessionStoreOptions, type LoggedRequest, type LoggedResponse, Logger, type LoggerProvider, METADATA, type MatchedRoute, type MaybePromise, MemoryCacheProvider, type MetaValue, Middleware, type MiddlewareEntry, type MiddlewareHandler, type MiddlewarePath, type MiddlewarePhase, MissingContextValueError, MissingContributorError, MissingMountDepError, type MissingParamKeys, type ModuleFactory, ModuleList, type ModuleRegistry, type ModuleRoutes, MountCycleError, type MountKind, type MountSortItem, MutableModuleRegistry, type NegatedRouteFlagName, type PaginatedResponse, type PaginationParams, type ParseQueryOptions, type ParsedQuery, Patch, type PlatformContext, type PluginAsyncOptions, type PluginFactory, Post, PostConstruct, type PostConstructStatus, PreDestroy, type ProblemDetails, ProblemException, Problems, Put, type QueryBuilderAdapter, type QueryFieldConfig, type QueryRejectReason, type QueryRejection, REQUEST_ID_HEADER, RESPONSE_CHANNEL, type RateLimitGuardOptions, type RateLimitOptions, type RateLimitStore, type Ref, type Reply, Repository, RequestContext, type RequestLoggerOptions, type RequestStore, type ResolvedDeps, type ResponseInfo, type RouteDefinition, type RouteEntry, type RouteFlag, type RouteFlagContext, type RouteFlagDeclaration, type RouteFlagDeclarations, type RouteFlagName, type RouteFlagPredicate, type RouteFlagRecord, type RouteFlagTest, type RouteFlagValue, type RouteFlags, type RouteMeta, type RouteMethod, RoutePolicyTable, type RouteShape, type RouteTable, type RunContributorsOptions, type RuntimeAppOptions, type RuntimeCapabilities, type RuntimeResponse, type RuntimeTypeMap, Scope, type ServerOptions, Service, type ServiceOptions, type Session, type SessionData, type SessionOptions, type SessionStore, type SortItem, type SourcedRegistration, SpaAdapter, type SpaAdapterOptions, type SseHandler, TRACEPARENT_HEADER, type TraceContext, type TraceContextOptions, type TypedConfigService, type TypedParsedQuery, UnknownAssetError, type UploadOptions, type UseConnectOptions, type ValidationError, Value, type ValuedRouteFlag, ViewAdapter, type ViewAdapterOptions, type WatchOptions, applyHandlerResult, assertFlagTest, assets, baseEnvSchema, bindRoutePolicy, bootstrap, buildMountPath, buildPipeline, buildQueryParams, buildRouteTable, buildRoutes, buildUploadMiddleware, cleanupFiles, clearAssetCache, computed, cors, createConfigService, createHandler, createLogger, createToken, cronScheduleId, csrf, csrfGuard, defaultProblemTitle, defineAdapter, defineAugmentation, defineContextDecorator, defineEnv, defineHttpContextDecorator, defineModule, defineModules, definePlugin, defineRouteFlag, describeError, disposeAll, errorHandler, expressRuntime, formatKickError, getCacheProvider, getClassMeta, getClassMetaOrUndefined, getCronJobs, getEnv, getMetaMap, getMetaRecord, getMethodMeta, getMethodMetaOrUndefined, getQueryParsingDefaults, getRequestStore, getRequestValue, getRouteFlags, groupAssetKeys, hasClassMeta, healthModule, helmet, isClusterPrimary, isCronJobEnabled, isInjectionToken, isRef, isReply, joinPaths, listCronJobs, loadEnv, loadEnvFromSchema, matchesFlagTest, materializeRouter, mountSort, normalizeApiQueryParamsConfig, normalizePath, normalizeProblem, notFoundHandler, offerRoutePolicy, parseFilters, parsePagination, parseQuery, parseSearchQuery, parseSort, parseTraceparent, pushClassMeta, pushMethodMeta, rateLimit, rateLimitGuard, reactive, ref, registerDisposable, reloadEnv, reply, reportError, reportResponse, requestId, requestLogger, requestScopeMiddleware, requestStore, resetEnvCache, resetQueryParsingDefaults, resolveAsset, resolveMimeTypes, resolveRouteFlags, runContributors, runCronJob, runCronJobs, session, setCacheProvider, setClassMeta, setInMetaMap, setInMetaRecord, setMethodMeta, setQueryParsingDefaults, settleBackgroundWork, stripExt, toRefs, tokenName, traceContext, unref, upload, useAssets, validate, waitUntil, watch, withBuilder };

package/dist/index.mjs

@@ -1,5 +1,5 @@
 /**
- * @forinda/kickjs v8.6.0
+ * @forinda/kickjs v8.7.0
  *
  * Copyright (c) Felix Orinda
  *
@@ -8,5 +8,5 @@
  *
  * @license MIT
  */
-import{a as loadEnvFromSchema,i as loadEnv,n as defineEnv,o as reloadEnv,r as getEnv,s as resetEnvCache,t as baseEnvSchema}from"./env-BelmDj19.mjs";import{METADATA,Scope}from"./core/interfaces.mjs";import{a as isInjectionToken,c as KickError,i as createToken,l as formatKickError,n as tokenName,r as INJECTION_TOKEN,t as Container}from"./container-DF8FRoY8.mjs";import{ConsoleLoggerProvider,Logger,createLogger,describeError}from"./core/logger.mjs";import{a as getMethodMeta,c as pushClassMeta,d as setInMetaMap,f as setInMetaRecord,i as getMetaRecord,l as pushMethodMeta,n as getClassMetaOrUndefined,o as getMethodMetaOrUndefined,p as setMethodMeta,r as getMetaMap,s as hasClassMeta,t as getClassMeta,u as setClassMeta}from"./metadata-B8_KXybT.mjs";import{ApiQueryParams,Asset,Autowired,Builder,Component,Controller,Delete,FileUpload,Get,Inject,Injectable,Middleware,Patch,Post,PostConstruct,PreDestroy,Put,Repository,Service,Value,normalizeApiQueryParamsConfig,withBuilder}from"./core/decorators.mjs";import{a as HEALTH_PROBE,c as DuplicateMountNameError,d as mountSort,f as defineModule,i as materializeRouter,l as MissingMountDepError,n as buildRoutes,o as HealthController,r as expressRuntime,s as healthModule,t as Application,u as MountCycleError}from"./application-DZiG1QCw.mjs";import{t as MutableModuleRegistry}from"./module-registry-BFrJ1PQ4.mjs";import{CRON_META,Cron,getCronJobs}from"./core/cron.mjs";import{CacheEvict,Cacheable,MemoryCacheProvider,getCacheProvider,setCacheProvider}from"./core/cache.mjs";import{r as registerDisposable,t as disposeAll}from"./disposables-CEAxve3A.mjs";import{HttpException,HttpStatus,ProblemException,Problems,defaultProblemTitle,normalizeProblem}from"./core/errors.mjs";import{buildMountPath,joinPaths,normalizePath}from"./core/path.mjs";import{computed,isRef,reactive,ref,toRefs,unref,watch}from"./core/reactivity.mjs";import{l as resolveRouteFlags,n as assertFlagTest,o as getRouteFlags,r as defineRouteFlag,s as matchesFlagTest}from"./route-flag-B4sNP7zH.mjs";import{a as clearAssetCache,c as groupAssetKeys,i as assets,l as stripExt,n as ASSET_MANIFEST_VERSION,o as resolveAsset,r as UnknownAssetError,s as useAssets,t as ASSETS,u as defineContextDecorator}from"./core-y8QbzHM5.mjs";import{i as MissingContributorError,n as DuplicateContributorError,r as MissingContextValueError,t as ContributorCycleError}from"./context-errors-Ch0DuUQo.mjs";import{i as buildPipeline,r as buildRouteTable}from"./router-builder-cTsA2XtO.mjs";import{t as runContributors}from"./contributor-runner-DujKZy4N.mjs";import{t as defineAdapter}from"./define-adapter-C1Db6xfO.mjs";import{n as bindRoutePolicy,r as offerRoutePolicy,t as RoutePolicyTable}from"./route-policy-CDlMbl1b.mjs";import{c as requestScopeMiddleware,i as reply,n as applyHandlerResult,r as isReply}from"./runtime-C-7Yhs7a.mjs";import{REQUEST_ID_HEADER,requestId}from"./http/middleware/request-id.mjs";import{errorHandler,notFoundHandler}from"./http/middleware/error-handler.mjs";import{i as requestStore,n as getRequestStore,r as getRequestValue,t as RequestContext}from"./context-BTqeZH1A.mjs";import{a as parseQuery,c as resetQueryParsingDefaults,i as parsePagination,l as setQueryParsingDefaults,n as getQueryParsingDefaults,o as parseSearchQuery,r as parseFilters,s as parseSort,t as buildQueryParams,u as FILTER_OPERATORS}from"./query-CC7o6I5K.mjs";import{validate}from"./http/middleware/validate.mjs";import{r as resolveMimeTypes}from"./upload-config-CoE6BzM4.mjs";import{buildUploadMiddleware,cleanupFiles,upload}from"./http/middleware/upload.mjs";import{n as isClusterPrimary,t as bootstrap}from"./bootstrap-BEbka3UV.mjs";import{n as csrfGuard,r as randomHex,t as csrf}from"./csrf-RP5hgc0c.mjs";import{requestLogger}from"./http/middleware/request-logger.mjs";import{helmet}from"./http/middleware/helmet.mjs";import{cors}from"./http/middleware/cors.mjs";import{rateLimit}from"./http/middleware/rate-limit.mjs";import{n as KvSessionStore,r as rateLimitGuard,t as KvRateLimitStore}from"./kv-stores-DUFcps01.mjs";import{session}from"./http/middleware/session.mjs";import{ViewAdapter}from"./http/middleware/views.mjs";import{SpaAdapter}from"./http/middleware/spa.mjs";import{n as createConfigService,t as ConfigService}from"./config-CIOXZmLS.mjs";var ModuleList=class extends Array{mount(module){return this.push(module),this}};function defineModules(...initial){let list=new ModuleList;for(let entry of initial)list.push(entry);return list}var CircuitOpenError=class extends Error{breakerName;constructor(breakerName){super(`Circuit breaker "${breakerName}" is open — request rejected`),this.breakerName=breakerName,this.name=`CircuitOpenError`}},CircuitBreaker=class{name;state=`closed`;failures=0;successes=0;halfOpenAttempts=0;lastFailure;openedAt;failureThreshold;resetTimeout;halfOpenMax;constructor(name,options){this.name=name,this.failureThreshold=options.failureThreshold,this.resetTimeout=options.resetTimeout,this.halfOpenMax=options.halfOpenMax??1}async execute(fn){if(this.maybeTransitionToHalfOpen(),this.state===`open`||this.state===`half_open`&&this.halfOpenAttempts>=this.halfOpenMax)throw new CircuitOpenError(this.name);this.state===`half_open`&&this.halfOpenAttempts++;try{let result=await fn();return this.onSuccess(),result}catch(error){throw this.onFailure(),error}}getState(){return this.maybeTransitionToHalfOpen(),this.state}getStats(){return this.maybeTransitionToHalfOpen(),{failures:this.failures,successes:this.successes,state:this.state,...this.lastFailure?{lastFailure:this.lastFailure}:{}}}reset(){this.state=`closed`,this.failures=0,this.successes=0,this.halfOpenAttempts=0,this.lastFailure=void 0,this.openedAt=void 0}onSuccess(){this.state===`half_open`&&(this.state=`closed`,this.failures=0,this.halfOpenAttempts=0,this.openedAt=void 0),this.successes++}onFailure(){this.failures++,this.lastFailure=new Date,this.state===`half_open`?(this.state=`open`,this.openedAt=Date.now(),this.halfOpenAttempts=0):this.state===`closed`&&this.failures>=this.failureThreshold&&(this.state=`open`,this.openedAt=Date.now())}maybeTransitionToHalfOpen(){this.state===`open`&&this.openedAt!=null&&Date.now()-this.openedAt>=this.resetTimeout&&(this.state=`half_open`,this.halfOpenAttempts=0)}};const mergeConfig=(defaults={},overrides={})=>({...defaults,...overrides}),composeName=(base,scope)=>`${base}:${scope}`;function definePlugin(options){let buildSync=(instanceName,scoped,overrides)=>{let config=mergeConfig(options.defaults,overrides),built=options.build(config,{name:instanceName,scoped});return built.name=instanceName,built},buildAsync=(instanceName,opts)=>{let inner,ensureInner=async container=>{if(inner)return inner;let deps=(opts.inject??[]).map(tok=>container.resolve(tok)),config=await opts.useFactory(...deps);return inner=buildSync(instanceName,!1,config),inner};return{name:instanceName,async onReady(container){let built=await ensureInner(container);built.register?.(container),await built.onReady?.(container)},async shutdown(){await inner?.shutdown?.()}}},factory=(config=>buildSync(options.name,!1,config));return factory.scoped=(scopeName,config)=>buildSync(composeName(options.name,scopeName),!0,config),factory.async=opts=>buildAsync(options.name,opts),Object.defineProperty(factory,"definition",{value:Object.freeze({...options})}),factory}function defineAugmentation(name,meta){}function createHandler(options){let app,ready=()=>(app??=(async()=>{let instance=new Application(options);try{await instance.startWithoutServer()}catch(err){throw app=void 0,await instance.shutdown().catch(()=>{}),err}return instance})(),app);return{ready,async fetch(request){return(await ready()).fetch(request)},async node(req,res){(await ready()).handle(req,res)},async close(){let current=app;app=void 0,current&&await(await current).shutdown()}}}function defineHttpContextDecoratorImpl(spec){return defineContextDecorator(spec)}const defineHttpContextDecorator=Object.freeze(Object.assign(defineHttpContextDecoratorImpl,{withParams:()=>spec=>defineHttpContextDecoratorImpl(spec)})),TRACEPARENT_HEADER=`traceparent`,TRACEPARENT_RE=/^([0-9a-f]{2})-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/;function generateTraceId(){return randomHex(16)}function generateSpanId(){return randomHex(8)}function parseTraceparent(header){let match=TRACEPARENT_RE.exec(header.trim().toLowerCase());if(!match)return null;let version=match[1],traceId=match[2],parentSpanId=match[3],flags=match[4];return version===`ff`||traceId===`00000000000000000000000000000000`||parentSpanId===`0000000000000000`?null:{version,traceId,parentSpanId,flags}}function traceContext(options={}){return(req,res,next)=>{let store=requestStore.getStore(),traceparentHeader=req.headers[TRACEPARENT_HEADER],raw=Array.isArray(traceparentHeader)?traceparentHeader[0]:traceparentHeader,parsed=raw?parseTraceparent(raw):null,traceId=parsed?.traceId??generateTraceId(),spanId=generateSpanId();store&&(store.values.set(`traceId`,traceId),store.values.set(`spanId`,spanId),parsed&&(store.values.set(`parentSpanId`,parsed.parentSpanId),store.values.set(`traceFlags`,parsed.flags),store.values.set(`traceVersion`,parsed.version))),req.traceId=traceId,req.spanId=spanId,options.propagateResponse&&res.setHeader(`traceresponse`,traceId),next()}}export{ASSETS,ASSET_MANIFEST_VERSION,ApiQueryParams,Application,Asset,Autowired,Builder,CRON_META,CacheEvict,Cacheable,CircuitBreaker,CircuitOpenError,Component,ConfigService,ConsoleLoggerProvider,Container,ContributorCycleError,Controller,Cron,Delete,DuplicateContributorError,DuplicateMountNameError,FILTER_OPERATORS,FileUpload,Get,HEALTH_PROBE,HealthController,HttpException,HttpStatus,INJECTION_TOKEN,Inject,Injectable,KickError,KvRateLimitStore,KvSessionStore,Logger,METADATA,MemoryCacheProvider,Middleware,MissingContextValueError,MissingContributorError,MissingMountDepError,ModuleList,MountCycleError,MutableModuleRegistry,Patch,Post,PostConstruct,PreDestroy,ProblemException,Problems,Put,REQUEST_ID_HEADER,Repository,RequestContext,RoutePolicyTable,Scope,Service,SpaAdapter,TRACEPARENT_HEADER,UnknownAssetError,Value,ViewAdapter,applyHandlerResult,assertFlagTest,assets,baseEnvSchema,bindRoutePolicy,bootstrap,buildMountPath,buildPipeline,buildQueryParams,buildRouteTable,buildRoutes,buildUploadMiddleware,cleanupFiles,clearAssetCache,computed,cors,createConfigService,createHandler,createLogger,createToken,csrf,csrfGuard,defaultProblemTitle,defineAdapter,defineAugmentation,defineContextDecorator,defineEnv,defineHttpContextDecorator,defineModule,defineModules,definePlugin,defineRouteFlag,describeError,disposeAll,errorHandler,expressRuntime,formatKickError,getCacheProvider,getClassMeta,getClassMetaOrUndefined,getCronJobs,getEnv,getMetaMap,getMetaRecord,getMethodMeta,getMethodMetaOrUndefined,getQueryParsingDefaults,getRequestStore,getRequestValue,getRouteFlags,groupAssetKeys,hasClassMeta,healthModule,helmet,isClusterPrimary,isInjectionToken,isRef,isReply,joinPaths,loadEnv,loadEnvFromSchema,matchesFlagTest,materializeRouter,mountSort,normalizeApiQueryParamsConfig,normalizePath,normalizeProblem,notFoundHandler,offerRoutePolicy,parseFilters,parsePagination,parseQuery,parseSearchQuery,parseSort,parseTraceparent,pushClassMeta,pushMethodMeta,rateLimit,rateLimitGuard,reactive,ref,registerDisposable,reloadEnv,reply,requestId,requestLogger,requestScopeMiddleware,requestStore,resetEnvCache,resetQueryParsingDefaults,resolveAsset,resolveMimeTypes,resolveRouteFlags,runContributors,session,setCacheProvider,setClassMeta,setInMetaMap,setInMetaRecord,setMethodMeta,setQueryParsingDefaults,stripExt,toRefs,tokenName,traceContext,unref,upload,useAssets,validate,watch,withBuilder};
+import{a as loadEnvFromSchema,i as loadEnv,n as defineEnv,o as reloadEnv,r as getEnv,s as resetEnvCache,t as baseEnvSchema}from"./env-8BLpzy-M.mjs";import{METADATA,Scope}from"./core/interfaces.mjs";import{a as isInjectionToken,d as KickError,f as formatKickError,i as createToken,n as tokenName,r as INJECTION_TOKEN,t as Container}from"./container-Cqow_bOU.mjs";import{ConsoleLoggerProvider,Logger,createLogger,describeError}from"./core/logger.mjs";import{a as getMethodMeta,c as pushClassMeta,d as setInMetaMap,f as setInMetaRecord,i as getMetaRecord,l as pushMethodMeta,n as getClassMetaOrUndefined,o as getMethodMetaOrUndefined,p as setMethodMeta,r as getMetaMap,s as hasClassMeta,t as getClassMeta,u as setClassMeta}from"./metadata-BClL-Eb0.mjs";import{ApiQueryParams,Asset,Autowired,Builder,Component,Controller,Delete,FileUpload,Get,Inject,Injectable,Middleware,Patch,Post,PostConstruct,PreDestroy,Put,Repository,Service,Value,normalizeApiQueryParamsConfig,withBuilder}from"./core/decorators.mjs";import{a as HEALTH_PROBE,c as ERROR_CHANNEL,d as DuplicateMountNameError,f as MissingMountDepError,h as defineModule,i as materializeRouter,l as HANDLER_CHANNEL,m as mountSort,n as buildRoutes,o as HealthController,p as MountCycleError,r as expressRuntime,s as healthModule,t as Application,u as RESPONSE_CHANNEL}from"./application-D2scwBz-.mjs";import{t as MutableModuleRegistry}from"./module-registry-kVXS3peW.mjs";import{i as reportResponse,r as reportError}from"./observers-C5Jid4FV.mjs";import{CRON_META,Cron,cronScheduleId,getCronJobs,isCronJobEnabled,listCronJobs,runCronJob,runCronJobs}from"./core/cron.mjs";import{CacheEvict,Cacheable,MemoryCacheProvider,getCacheProvider,setCacheProvider}from"./core/cache.mjs";import{r as registerDisposable,t as disposeAll}from"./disposables-BFIEp5VA.mjs";import{HttpException,HttpStatus,ProblemException,Problems,defaultProblemTitle,normalizeProblem}from"./core/errors.mjs";import{buildMountPath,joinPaths,normalizePath}from"./core/path.mjs";import{computed,isRef,reactive,ref,toRefs,unref,watch}from"./core/reactivity.mjs";import{l as resolveRouteFlags,n as assertFlagTest,o as getRouteFlags,r as defineRouteFlag,s as matchesFlagTest}from"./route-flag-BCBTtP_4.mjs";import{a as clearAssetCache,c as groupAssetKeys,i as assets,l as stripExt,n as ASSET_MANIFEST_VERSION,o as resolveAsset,r as UnknownAssetError,s as useAssets,t as ASSETS,u as defineContextDecorator}from"./core-Chc61ahe.mjs";import{i as MissingContributorError,n as DuplicateContributorError,r as MissingContextValueError,t as ContributorCycleError}from"./context-errors-VduncZFQ.mjs";import{i as buildPipeline,r as buildRouteTable}from"./router-builder-Brup4e82.mjs";import{t as runContributors}from"./contributor-runner-BoVekHyj.mjs";import{t as defineAdapter}from"./define-adapter-BJunWqi0.mjs";import{n as bindRoutePolicy,r as offerRoutePolicy,t as RoutePolicyTable}from"./route-policy-FeJHstvF.mjs";import{c as requestScopeMiddleware,i as reply,n as applyHandlerResult,r as isReply}from"./runtime-CV0SS-X5.mjs";import{REQUEST_ID_HEADER,requestId}from"./http/middleware/request-id.mjs";import{a as waitUntil,c as requestStore,i as settleBackgroundWork,n as forwardBackgroundWork,o as getRequestStore,s as getRequestValue,t as RequestContext}from"./context-CHuuc9r6.mjs";import{errorHandler,notFoundHandler}from"./http/middleware/error-handler.mjs";import{a as parseQuery,c as resetQueryParsingDefaults,i as parsePagination,l as setQueryParsingDefaults,n as getQueryParsingDefaults,o as parseSearchQuery,r as parseFilters,s as parseSort,t as buildQueryParams,u as FILTER_OPERATORS}from"./query-1Q69dPhY.mjs";import{validate}from"./http/middleware/validate.mjs";import{r as resolveMimeTypes}from"./upload-config-BBp5QfWQ.mjs";import{buildUploadMiddleware,cleanupFiles,upload}from"./http/middleware/upload.mjs";import{i as KickCronAdapter,n as isClusterPrimary,r as CRON_WORKER_ENV,t as bootstrap}from"./bootstrap-Dds2PVAn.mjs";import{n as csrfGuard,r as randomHex,t as csrf}from"./csrf-D-8W1iv7.mjs";import{requestLogger}from"./http/middleware/request-logger.mjs";import{helmet}from"./http/middleware/helmet.mjs";import{cors}from"./http/middleware/cors.mjs";import{rateLimit}from"./http/middleware/rate-limit.mjs";import{n as KvSessionStore,r as rateLimitGuard,t as KvRateLimitStore}from"./kv-stores-BDcvhJBw.mjs";import{session}from"./http/middleware/session.mjs";import{ViewAdapter}from"./http/middleware/views.mjs";import{SpaAdapter}from"./http/middleware/spa.mjs";import{n as createConfigService,t as ConfigService}from"./config-DBebCpg_.mjs";var ModuleList=class extends Array{mount(module){return this.push(module),this}};function defineModules(...initial){let list=new ModuleList;for(let entry of initial)list.push(entry);return list}var CircuitOpenError=class extends Error{breakerName;constructor(breakerName){super(`Circuit breaker "${breakerName}" is open — request rejected`),this.breakerName=breakerName,this.name=`CircuitOpenError`}},CircuitBreaker=class{name;state=`closed`;failures=0;successes=0;halfOpenAttempts=0;lastFailure;openedAt;failureThreshold;resetTimeout;halfOpenMax;constructor(name,options){this.name=name,this.failureThreshold=options.failureThreshold,this.resetTimeout=options.resetTimeout,this.halfOpenMax=options.halfOpenMax??1}async execute(fn){if(this.maybeTransitionToHalfOpen(),this.state===`open`||this.state===`half_open`&&this.halfOpenAttempts>=this.halfOpenMax)throw new CircuitOpenError(this.name);this.state===`half_open`&&this.halfOpenAttempts++;try{let result=await fn();return this.onSuccess(),result}catch(error){throw this.onFailure(),error}}getState(){return this.maybeTransitionToHalfOpen(),this.state}getStats(){return this.maybeTransitionToHalfOpen(),{failures:this.failures,successes:this.successes,state:this.state,...this.lastFailure?{lastFailure:this.lastFailure}:{}}}reset(){this.state=`closed`,this.failures=0,this.successes=0,this.halfOpenAttempts=0,this.lastFailure=void 0,this.openedAt=void 0}onSuccess(){this.state===`half_open`&&(this.state=`closed`,this.failures=0,this.halfOpenAttempts=0,this.openedAt=void 0),this.successes++}onFailure(){this.failures++,this.lastFailure=new Date,this.state===`half_open`?(this.state=`open`,this.openedAt=Date.now(),this.halfOpenAttempts=0):this.state===`closed`&&this.failures>=this.failureThreshold&&(this.state=`open`,this.openedAt=Date.now())}maybeTransitionToHalfOpen(){this.state===`open`&&this.openedAt!=null&&Date.now()-this.openedAt>=this.resetTimeout&&(this.state=`half_open`,this.halfOpenAttempts=0)}};const mergeConfig=(defaults={},overrides={})=>({...defaults,...overrides}),composeName=(base,scope)=>`${base}:${scope}`;function definePlugin(options){let buildSync=(instanceName,scoped,overrides)=>{let config=mergeConfig(options.defaults,overrides),built=options.build(config,{name:instanceName,scoped});return built.name=instanceName,built},buildAsync=(instanceName,opts)=>{let inner,ensureInner=async container=>{if(inner)return inner;let deps=(opts.inject??[]).map(tok=>container.resolve(tok)),config=await opts.useFactory(...deps);return inner=buildSync(instanceName,!1,config),inner};return{name:instanceName,async onReady(container){let built=await ensureInner(container);built.register?.(container),await built.onReady?.(container)},async shutdown(){await inner?.shutdown?.()}}},factory=(config=>buildSync(options.name,!1,config));return factory.scoped=(scopeName,config)=>buildSync(composeName(options.name,scopeName),!0,config),factory.async=opts=>buildAsync(options.name,opts),Object.defineProperty(factory,"definition",{value:Object.freeze({...options})}),factory}function defineAugmentation(name,meta){}function createHandler(options){let app,ready=()=>(app??=(async()=>{let instance=new Application(options);try{await instance.startWithoutServer()}catch(err){throw app=void 0,await instance.shutdown().catch(()=>{}),err}return instance})(),app);return{ready,async fetch(request,platform){let response=await(await ready()).fetch(request);return forwardBackgroundWork(platform),response},async node(req,res,platform){if((await ready()).handle(req,res),platform?.waitUntil){let sent=new Promise(resolve=>res.once(`close`,()=>resolve()));platform.waitUntil(sent.then(settleBackgroundWork))}},async close(){let current=app;app=void 0,current&&await(await current).shutdown()}}}function defineHttpContextDecoratorImpl(spec){return defineContextDecorator(spec)}const defineHttpContextDecorator=Object.freeze(Object.assign(defineHttpContextDecoratorImpl,{withParams:()=>spec=>defineHttpContextDecoratorImpl(spec)})),TRACEPARENT_HEADER=`traceparent`,TRACEPARENT_RE=/^([0-9a-f]{2})-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/;function generateTraceId(){return randomHex(16)}function generateSpanId(){return randomHex(8)}function parseTraceparent(header){let match=TRACEPARENT_RE.exec(header.trim().toLowerCase());if(!match)return null;let version=match[1],traceId=match[2],parentSpanId=match[3],flags=match[4];return version===`ff`||traceId===`00000000000000000000000000000000`||parentSpanId===`0000000000000000`?null:{version,traceId,parentSpanId,flags}}function traceContext(options={}){return(req,res,next)=>{let store=requestStore.getStore(),traceparentHeader=req.headers[TRACEPARENT_HEADER],raw=Array.isArray(traceparentHeader)?traceparentHeader[0]:traceparentHeader,parsed=raw?parseTraceparent(raw):null,traceId=parsed?.traceId??generateTraceId(),spanId=generateSpanId();store&&(store.values.set(`traceId`,traceId),store.values.set(`spanId`,spanId),parsed&&(store.values.set(`parentSpanId`,parsed.parentSpanId),store.values.set(`traceFlags`,parsed.flags),store.values.set(`traceVersion`,parsed.version))),req.traceId=traceId,req.spanId=spanId,options.propagateResponse&&res.setHeader(`traceresponse`,traceId),next()}}export{ASSETS,ASSET_MANIFEST_VERSION,ApiQueryParams,Application,Asset,Autowired,Builder,CRON_META,CRON_WORKER_ENV,CacheEvict,Cacheable,CircuitBreaker,CircuitOpenError,Component,ConfigService,ConsoleLoggerProvider,Container,ContributorCycleError,Controller,Cron,Delete,DuplicateContributorError,DuplicateMountNameError,ERROR_CHANNEL,FILTER_OPERATORS,FileUpload,Get,HANDLER_CHANNEL,HEALTH_PROBE,HealthController,HttpException,HttpStatus,INJECTION_TOKEN,Inject,Injectable,KickCronAdapter,KickError,KvRateLimitStore,KvSessionStore,Logger,METADATA,MemoryCacheProvider,Middleware,MissingContextValueError,MissingContributorError,MissingMountDepError,ModuleList,MountCycleError,MutableModuleRegistry,Patch,Post,PostConstruct,PreDestroy,ProblemException,Problems,Put,REQUEST_ID_HEADER,RESPONSE_CHANNEL,Repository,RequestContext,RoutePolicyTable,Scope,Service,SpaAdapter,TRACEPARENT_HEADER,UnknownAssetError,Value,ViewAdapter,applyHandlerResult,assertFlagTest,assets,baseEnvSchema,bindRoutePolicy,bootstrap,buildMountPath,buildPipeline,buildQueryParams,buildRouteTable,buildRoutes,buildUploadMiddleware,cleanupFiles,clearAssetCache,computed,cors,createConfigService,createHandler,createLogger,createToken,cronScheduleId,csrf,csrfGuard,defaultProblemTitle,defineAdapter,defineAugmentation,defineContextDecorator,defineEnv,defineHttpContextDecorator,defineModule,defineModules,definePlugin,defineRouteFlag,describeError,disposeAll,errorHandler,expressRuntime,formatKickError,getCacheProvider,getClassMeta,getClassMetaOrUndefined,getCronJobs,getEnv,getMetaMap,getMetaRecord,getMethodMeta,getMethodMetaOrUndefined,getQueryParsingDefaults,getRequestStore,getRequestValue,getRouteFlags,groupAssetKeys,hasClassMeta,healthModule,helmet,isClusterPrimary,isCronJobEnabled,isInjectionToken,isRef,isReply,joinPaths,listCronJobs,loadEnv,loadEnvFromSchema,matchesFlagTest,materializeRouter,mountSort,normalizeApiQueryParamsConfig,normalizePath,normalizeProblem,notFoundHandler,offerRoutePolicy,parseFilters,parsePagination,parseQuery,parseSearchQuery,parseSort,parseTraceparent,pushClassMeta,pushMethodMeta,rateLimit,rateLimitGuard,reactive,ref,registerDisposable,reloadEnv,reply,reportError,reportResponse,requestId,requestLogger,requestScopeMiddleware,requestStore,resetEnvCache,resetQueryParsingDefaults,resolveAsset,resolveMimeTypes,resolveRouteFlags,runContributors,runCronJob,runCronJobs,session,setCacheProvider,setClassMeta,setInMetaMap,setInMetaRecord,setMethodMeta,setQueryParsingDefaults,settleBackgroundWork,stripExt,toRefs,tokenName,traceContext,unref,upload,useAssets,validate,waitUntil,watch,withBuilder};
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../src/core/define-modules.ts","../src/core/circuit-breaker.ts","../src/core/define-plugin.ts","../src/core/augmentation.ts","../src/http/handler.ts","../src/http/define-http-context-decorator.ts","../src/http/middleware/trace-context.ts"],"sourcesContent":["import type { AppModuleEntry } from './app-module'\n\n/**\n * Chainable registry returned by {@link defineModules}. Extends\n * `Array<AppModuleEntry>` so it drops into `bootstrap({ modules })`\n * unchanged — the framework loader already iterates the array, so a\n * `ModuleList` IS a valid `modules` value with no special handling.\n *\n * The added affordance is `.mount(module)` returning `this` so\n * adopters can build the list fluently:\n *\n * ```ts\n * const modules = defineModules()\n *   .mount(HelloModule())\n *   .mount(AdminModule())\n *\n * bootstrap({ modules })\n * ```\n *\n * **Why not just use a plain array?** Two reasons. First, the\n * fluent shape reads more naturally for module-list construction —\n * adopters used to `definePlugin().scoped(...)` / `defineAdapter(...)`\n * see the same call-then-call pattern. Second, the registry is the\n * stable extension point: a future `.use(module)` for non-HTTP\n * modules (queues, cron, workers) lands as a method on `ModuleList`\n * without breaking the `Array<AppModuleEntry>` superclass contract.\n */\nexport class ModuleList extends Array<AppModuleEntry> {\n  /**\n   * Append a module to the list. Returns `this` for chaining.\n   *\n   * Accepts both class form (`SomeModule extends AppModule`) and\n   * `defineModule` factory output — same as the underlying\n   * `bootstrap({ modules })` array. The framework loader\n   * discriminates `typeof entry === 'function'` at boot.\n   */\n  mount(module: AppModuleEntry): this {\n    this.push(module)\n    return this\n  }\n}\n\n/**\n * Build a {@link ModuleList} for the application. Optional vararg\n * lets adopters seed the list inline; subsequent `.mount()` calls\n * append.\n *\n * @example\n * ```ts\n * import { bootstrap, defineModules } from '@forinda/kickjs'\n * import { HelloModule } from './modules/hello/hello.module'\n * import { AdminModule } from './modules/admin/admin.module'\n *\n * // Fluent — most common\n * const modules = defineModules()\n *   .mount(HelloModule())\n *   .mount(AdminModule())\n *\n * // Or seeded inline + chained\n * const modules2 = defineModules(HelloModule()).mount(AdminModule())\n *\n * await bootstrap({ modules })\n * ```\n *\n * The returned value is an `AppModuleEntry[]` subclass — `bootstrap`\n * accepts it directly without any special-casing. For conditional /\n * dynamic registration at bootstrap time (env flags, runtime config,\n * tenant lists), use the `setup(registry)` callback on `bootstrap`\n * instead — both surfaces compose.\n */\nexport function defineModules(...initial: AppModuleEntry[]): ModuleList {\n  const list = new ModuleList()\n  for (const entry of initial) list.push(entry)\n  return list\n}\n","/**\n * Circuit Breaker pattern for external service calls.\n *\n * Protects your application from cascading failures when downstream\n * services are unhealthy by short-circuiting requests after a\n * configurable failure threshold.\n *\n * @example\n * ```ts\n * const breaker = new CircuitBreaker('payment-api', {\n *   failureThreshold: 5,\n *   resetTimeout: 30_000,\n * })\n *\n * const result = await breaker.execute(() => fetch('https://payment.example.com/charge'))\n * ```\n */\n\nexport type CircuitBreakerState = 'closed' | 'open' | 'half_open'\n\nexport interface CircuitBreakerOptions {\n  /** Number of consecutive failures before the circuit opens. */\n  failureThreshold: number\n  /** Milliseconds to wait before transitioning from OPEN to HALF_OPEN. */\n  resetTimeout: number\n  /** Max requests allowed in HALF_OPEN state before deciding (default 1). */\n  halfOpenMax?: number\n}\n\nexport interface CircuitBreakerStats {\n  failures: number\n  successes: number\n  state: CircuitBreakerState\n  lastFailure?: Date\n}\n\n/**\n * Error thrown when the circuit is open and calls are being rejected.\n */\nexport class CircuitOpenError extends Error {\n  constructor(public readonly breakerName: string) {\n    super(`Circuit breaker \"${breakerName}\" is open — request rejected`)\n    this.name = 'CircuitOpenError'\n  }\n}\n\nexport class CircuitBreaker {\n  private state: CircuitBreakerState = 'closed'\n  private failures = 0\n  private successes = 0\n  private halfOpenAttempts = 0\n  private lastFailure?: Date\n  private openedAt?: number\n\n  private readonly failureThreshold: number\n  private readonly resetTimeout: number\n  private readonly halfOpenMax: number\n\n  constructor(\n    public readonly name: string,\n    options: CircuitBreakerOptions,\n  ) {\n    this.failureThreshold = options.failureThreshold\n    this.resetTimeout = options.resetTimeout\n    this.halfOpenMax = options.halfOpenMax ?? 1\n  }\n\n  /**\n   * Execute an async function through the circuit breaker.\n   * Throws `CircuitOpenError` if the circuit is open.\n   */\n  async execute<T>(fn: () => Promise<T>): Promise<T> {\n    this.maybeTransitionToHalfOpen()\n\n    if (this.state === 'open') {\n      throw new CircuitOpenError(this.name)\n    }\n\n    if (this.state === 'half_open' && this.halfOpenAttempts >= this.halfOpenMax) {\n      throw new CircuitOpenError(this.name)\n    }\n\n    if (this.state === 'half_open') {\n      this.halfOpenAttempts++\n    }\n\n    try {\n      const result = await fn()\n      this.onSuccess()\n      return result\n    } catch (error) {\n      this.onFailure()\n      throw error\n    }\n  }\n\n  /** Returns the current circuit state. */\n  getState(): CircuitBreakerState {\n    this.maybeTransitionToHalfOpen()\n    return this.state\n  }\n\n  /** Returns current statistics. */\n  getStats(): CircuitBreakerStats {\n    this.maybeTransitionToHalfOpen()\n    return {\n      failures: this.failures,\n      successes: this.successes,\n      state: this.state,\n      ...(this.lastFailure ? { lastFailure: this.lastFailure } : {}),\n    }\n  }\n\n  /** Manually reset the circuit breaker to CLOSED state. */\n  reset(): void {\n    this.state = 'closed'\n    this.failures = 0\n    this.successes = 0\n    this.halfOpenAttempts = 0\n    this.lastFailure = undefined\n    this.openedAt = undefined\n  }\n\n  private onSuccess(): void {\n    if (this.state === 'half_open') {\n      // Recovery confirmed — close the circuit\n      this.state = 'closed'\n      this.failures = 0\n      this.halfOpenAttempts = 0\n      this.openedAt = undefined\n    }\n    this.successes++\n  }\n\n  private onFailure(): void {\n    this.failures++\n    this.lastFailure = new Date()\n\n    if (this.state === 'half_open') {\n      // Recovery failed — re-open\n      this.state = 'open'\n      this.openedAt = Date.now()\n      this.halfOpenAttempts = 0\n    } else if (this.state === 'closed' && this.failures >= this.failureThreshold) {\n      this.state = 'open'\n      this.openedAt = Date.now()\n    }\n  }\n\n  private maybeTransitionToHalfOpen(): void {\n    if (this.state === 'open' && this.openedAt != null) {\n      if (Date.now() - this.openedAt >= this.resetTimeout) {\n        this.state = 'half_open'\n        this.halfOpenAttempts = 0\n      }\n    }\n  }\n}\n","import type { Container } from './container'\nimport type { KickPlugin } from './plugin'\n\n/**\n * Options passed to {@link definePlugin}. Mirrors the spec in\n * `architecture.md` §21.3.1 + §21.2.2 (Phase A \"lite\").\n */\nexport interface DefinePluginOptions<TConfig> {\n  /** Stable identity used for logging, `dependsOn` lookups, and `.scoped()` namespacing. */\n  name: string\n\n  /** Optional plugin version — surfaced to DevTools and `kick add` compatibility checks (Phase B). */\n  version?: string\n\n  /**\n   * Peer-version ranges this plugin needs from the framework or other\n   * plugins. Recorded as metadata; runtime enforcement lands in §21.4.4.\n   */\n  requires?: { kickjs?: string }\n\n  /** Default config merged under any caller overrides. */\n  defaults?: Partial<TConfig>\n\n  /** Builds the underlying {@link KickPlugin} from the resolved config. */\n  build(config: TConfig, ctx: BuildContext): Omit<KickPlugin, 'name'>\n}\n\n/**\n * Hook context handed to a plugin/adapter `build` function. `name` is the\n * resolved instance name (the bare definition name for the bare call,\n * or `${defName}:${scope}` for `.scoped()`). `scoped` is the discriminator\n * authors use to namespace DI tokens or resource keys.\n */\nexport interface BuildContext {\n  name: string\n  scoped: boolean\n}\n\n/**\n * Async-config form of a plugin or adapter — `inject` lists DI tokens to\n * resolve from the container, then `useFactory` produces the config.\n *\n * Plugins resolve this lazily inside `onReady`, so any module/adapter/\n * middleware/contributor a plugin contributes via `build` is **not\n * available** when `.async()` is used. Use the bare/`.scoped()` form for\n * plugins that need to register modules or middleware.\n */\nexport interface PluginAsyncOptions<TConfig> {\n  inject?: ReadonlyArray<unknown>\n  useFactory(...deps: any[]): TConfig | Promise<TConfig>\n}\n\n/**\n * Factory returned by {@link definePlugin}. Callable form is the singleton\n * (`AuthPlugin(config)`); `.scoped()` and `.async()` are the multi-instance\n * and deferred-config forms.\n */\nexport interface PluginFactory<TConfig> {\n  (config?: Partial<TConfig>): KickPlugin\n  scoped(scopeName: string, config?: Partial<TConfig>): KickPlugin\n  async(opts: PluginAsyncOptions<TConfig>): KickPlugin\n  /** Read-only access to the original definition — useful for DevTools introspection. */\n  readonly definition: Readonly<DefinePluginOptions<TConfig>>\n}\n\nconst mergeConfig = <TConfig>(\n  defaults: Partial<TConfig> = {},\n  overrides: Partial<TConfig> = {},\n): TConfig => ({ ...defaults, ...overrides }) as TConfig\n\nconst composeName = (base: string, scope: string): string => `${base}:${scope}`\n\n/**\n * Build a {@link KickPlugin} factory from a typed definition. See\n * `architecture.md` §21.2.2 for the design rationale.\n *\n * @example\n * ```ts\n * const FlagsPlugin = definePlugin<FlagsConfig>({\n *   name: 'FlagsPlugin',\n *   defaults: { defaultTtl: 60_000 },\n *   build(config) {\n *     return {\n *       register(container) {\n *         container.registerInstance(FLAGS, makeProvider(config))\n *       },\n *     }\n *   },\n * })\n *\n * bootstrap({ plugins: [FlagsPlugin({ provider: launchDarkly })] })\n * ```\n */\nexport function definePlugin<TConfig = Record<string, unknown>>(\n  options: DefinePluginOptions<TConfig>,\n): PluginFactory<TConfig> {\n  const buildSync = (\n    instanceName: string,\n    scoped: boolean,\n    overrides?: Partial<TConfig>,\n  ): KickPlugin => {\n    const config = mergeConfig(options.defaults, overrides)\n    // Mutate `name` on the build result instead of spreading — spread\n    // strips prototype methods when `build()` returns a class instance.\n    const built = options.build(config, { name: instanceName, scoped }) as KickPlugin\n    built.name = instanceName\n    return built\n  }\n\n  const buildAsync = (instanceName: string, opts: PluginAsyncOptions<TConfig>): KickPlugin => {\n    let inner: KickPlugin | undefined\n\n    const ensureInner = async (container: Container): Promise<KickPlugin> => {\n      if (inner) return inner\n      const deps = (opts.inject ?? []).map((tok) => container.resolve(tok as never))\n      const config = await opts.useFactory(...deps)\n      inner = buildSync(instanceName, false, config as Partial<TConfig>)\n      return inner\n    }\n\n    return {\n      name: instanceName,\n      async onReady(container: Container) {\n        const built = await ensureInner(container)\n        // Run the inner plugin's register() now that we have the config —\n        // late but better than never; `.async()` plugins skip the early\n        // module/middleware contribution surface by design.\n        built.register?.(container)\n        await built.onReady?.(container)\n      },\n      async shutdown() {\n        await inner?.shutdown?.()\n      },\n    }\n  }\n\n  const factory = ((config?: Partial<TConfig>) =>\n    buildSync(options.name, false, config)) as PluginFactory<TConfig>\n\n  factory.scoped = (scopeName: string, config?: Partial<TConfig>) =>\n    buildSync(composeName(options.name, scopeName), true, config)\n\n  factory.async = (opts: PluginAsyncOptions<TConfig>) => buildAsync(options.name, opts)\n\n  Object.defineProperty(factory, 'definition', { value: Object.freeze({ ...options }) })\n\n  return factory\n}\n","/**\n * Augmentation registry — runtime no-op + the canonical\n * `KickJsPluginRegistry` interface that `kick typegen` augments.\n *\n * See `architecture.md` §21.2.1 (typegen for `dependsOn`) and §21.3.3\n * (standardized augmentation registry) for the design rationale.\n *\n * @module @forinda/kickjs/core/augmentation\n */\n\n/**\n * Marker interface that lists every plugin/adapter in the project. The\n * keys are the literal `name` field passed to `defineAdapter` /\n * `definePlugin` (or declared on a `class implements AppAdapter`); the\n * values are the kind tag (`'plugin' | 'adapter'`).\n *\n * The framework ships this empty. `kick typegen` augments it from\n * source so `keyof KickJsPluginRegistry` resolves to a string-literal\n * union of every name in scope — and therefore so do `dependsOn`\n * declarations on plugins/adapters.\n */\nexport interface KickJsPluginRegistry {}\n\n/**\n * Resolves to a string-literal union of every registered plugin/adapter\n * name when the project's typegen has populated `KickJsPluginRegistry`,\n * or to `string` when the registry is empty (no typegen pass yet).\n *\n * Falling back to `string` keeps fresh projects compiling — the typegen\n * narrowing is a progressive enhancement, not a hard prerequisite.\n */\nexport type KickJsPluginName = keyof KickJsPluginRegistry extends never\n  ? string\n  : keyof KickJsPluginRegistry & string\n\n/**\n * Metadata attached to a `defineAugmentation` call. The fields are\n * documentation-only — `kick typegen` surfaces them in the generated\n * `.kickjs/types/kick__augmentations.d.ts` so adopters can browse every\n * augmentable interface from one place.\n *\n * `description` and `example` may both be multi-line — typegen preserves\n * line breaks when rendering them as JSDoc. There is no upper limit on\n * the example size; entire shape definitions or worked snippets are fine.\n */\nexport interface AugmentationMeta {\n  /**\n   * Free-form description of what the augmentation customises. May be\n   * multi-line — newlines are preserved in the generated JSDoc.\n   */\n  description?: string\n  /**\n   * TS snippet showing a typical shape. May be multi-line; rendered\n   * inside a fenced code block in the generated catalogue. Use this\n   * for anything from `'{ foo: string }'` up to a full interface body\n   * — typegen no longer flattens newlines.\n   */\n  example?: string\n}\n\n/**\n * @deprecated Since 7.2. This was tooling for a time when Context\n * Contributors were still settling — a catalogue so adopters could discover\n * which interfaces were augmentable. Contributors are a stable, typed API now\n * (`defineContextDecorator`, `ContextMeta`), and the catalogue adds a second\n * call that must be kept in step with the `declare module` block for no\n * type-level benefit.\n *\n * Nothing breaks: `kick typegen` still discovers the call and still writes the\n * catalogue. Just drop it — the `declare module '@forinda/kickjs'` block alone\n * gives you the types, which is all it ever gave you.\n *\n * What it actually emits, for the record: one empty marker interface per call\n * in `.kickjs/types/kick__augmentations.d.ts` —\n *\n * ```ts\n * // from defineAugmentation('ContextMeta', { description, example })\n * export interface ContextMetaAugmentation {}\n * ```\n *\n * with your `description` / `example` rendered as its JSDoc and a `@see` back\n * to the call site. The interface is empty and unreferenced; nothing consumes\n * it at type level.\n *\n * Advertise an augmentable interface so `kick typegen` can list it in\n * `.kickjs/types/kick__augmentations.d.ts` for project-wide discovery.\n *\n * **This function is a runtime AND type-level no-op.** It does NOT\n * augment the interface for TypeScript. The actual augmentation is\n * the `declare module` block — `defineAugmentation` only adds an\n * entry to the typegen catalogue (`.kickjs/types/kick__augmentations.d.ts`)\n * so other contributors / adopters can find the interface and know its\n * expected shape.\n *\n * Both calls are needed:\n *\n * ```ts\n * import { defineAugmentation } from '@forinda/kickjs'\n *\n * // (1) The actual TS augmentation — what `ctx.get('tenant')` reads.\n * declare module '@forinda/kickjs' {\n *   interface ContextMeta {\n *     tenant: { id: string; name: string }\n *   }\n * }\n *\n * // (2) Catalogue entry — what `kick typegen` lists in\n * //     `.kickjs/types/kick__augmentations.d.ts` for browseability.\n * defineAugmentation('ContextMeta', {\n *   description: 'Tenant resolved from x-tenant-id by TenantAdapter',\n *   example: `{\n *     tenant: {\n *       id: string\n *       name: string\n *       plan: 'free' | 'pro' | 'enterprise'\n *       featureFlags: Record<string, boolean>\n *     }\n *   }`,\n * })\n * ```\n *\n * Skip `defineAugmentation` if you don't care about the catalogue — the\n * `declare module` block alone is enough for runtime + type behaviour.\n *\n * @deprecated Low value in practice: it does nothing at runtime or at\n * the type level — the `declare module` block alone gives you the\n * augmentation, and the generated `.kickjs/types/kick__augmentations.d.ts`\n * catalogue it feeds is documentation-only. Prefer a plain\n * `declare module '@forinda/kickjs' { ... }` block and (optionally) a\n * JSDoc comment on your own interface. `defineAugmentation` and the\n * `kick/augmentations` typegen plugin will be removed in a future major.\n */\nexport function defineAugmentation(name: string, meta?: AugmentationMeta): void {\n  // No-op at runtime — `kick typegen` discovers the call statically and\n  // emits the augmentation catalogue. Touch the args so esbuild / tsc\n  // don't drop the call as dead code under aggressive minification\n  // (the marker has to survive the build for static scanners that look\n  // at compiled output, e.g. third-party tools).\n  void name\n  void meta\n}\n","/**\n * The app as a request handler, with no listening server of its own — for\n * platforms that hand you requests instead of a port: Netlify Functions,\n * Vercel Functions, and any other serverless or embedding host.\n *\n * @module @forinda/kickjs/http/handler\n */\nimport type { IncomingMessage, ServerResponse } from 'node:http'\nimport { Application, type ApplicationOptions } from './application'\n\n/** A KickJS app exposed as request handlers. See {@link createHandler}. */\nexport interface KickHandler {\n  /**\n   * Web-standard handler: `fetch(Request) → Response`. Netlify Functions,\n   * Vercel's fetch export, and anything else that speaks `Request`.\n   */\n  fetch(request: Request): Promise<Response>\n  /** Node handler: `(req, res)`. Vercel Node functions, `http.createServer`. */\n  node(req: IncomingMessage, res: ServerResponse): Promise<void>\n  /** Set the app up now instead of on the first request (warm-up). */\n  ready(): Promise<Application>\n  /** Shut adapters down and stop the internal forwarding server, if one started. */\n  close(): Promise<void>\n}\n\n/**\n * Build a KickJS app as request handlers instead of a listening server.\n *\n * Takes the same options as `bootstrap()`. The app is set up once per process\n * (per function instance), lazily on the first request, and reused after that.\n * Nothing listens on a port, `afterStart` does not run, and no process signal\n * handlers are registered — the platform owns the process.\n *\n * `fetch` uses the runtime's own fetch when it has one (the h3 v2 runtime).\n * Runtimes built on Node request/response objects — Express, the default —\n * are served through a server bound to `127.0.0.1` on a random port inside the\n * same process, started on first use: the `Request` is forwarded to it and its\n * response returned. Request bodies are buffered on that path; response bodies\n * stream. Adapters that rewrite the `res` prototype (Express does) make a\n * direct Request→`res` bridge unreliable, which is why this forwards instead.\n *\n * One handler per process: the DI container is process-wide.\n *\n * @example\n * ```ts\n * // server/src/serverless.ts\n * import 'reflect-metadata'\n * import './config'\n * import { createHandler } from '@forinda/kickjs'\n * import { modules } from './modules'\n *\n * export const handler = createHandler({ modules })\n *\n * // netlify/functions/api.mjs\n * export default (request) => handler.fetch(request)\n * export const config = { path: '/api/*' }\n * ```\n */\nexport function createHandler(options: ApplicationOptions): KickHandler {\n  let app: Promise<Application> | undefined\n\n  const ready = (): Promise<Application> => {\n    app ??= (async () => {\n      const instance = new Application(options)\n      try {\n        await instance.startWithoutServer()\n      } catch (err) {\n        // A failed setup (a database that was briefly down, say) is retried on\n        // the next request. Shut this attempt down first so its adapters don't\n        // stay live next to the retry's.\n        app = undefined\n        await instance.shutdown().catch(() => {})\n        throw err\n      }\n      return instance\n    })()\n    return app\n  }\n\n  return {\n    ready,\n\n    async fetch(request) {\n      return (await ready()).fetch(request)\n    },\n\n    async node(req, res) {\n      const instance = await ready()\n      instance.handle(req, res)\n    },\n\n    async close() {\n      const current = app\n      app = undefined\n      if (current) await (await current).shutdown()\n    },\n  }\n}\n","/**\n * HTTP-flavoured wrapper around {@link defineContextDecorator}.\n *\n * The core factory leaves `Ctx` defaulted to {@link ExecutionContext} so the\n * Context Contributor pipeline stays transport-agnostic — future WebSocket,\n * queue, and cron contexts share the same primitive. The cost is that the\n * vast majority of contributors (which are HTTP) have to spell the fourth\n * generic by hand to get `ctx.req` / `ctx.headers` typing:\n *\n * ```ts\n * // Verbose: spell every generic, including the params shape `P`.\n * defineContextDecorator<'tenant', Record<string, never>, Record<string, never>, RequestContext>({\n *   key: 'tenant',\n *   resolve: (ctx) => ({ id: ctx.req.headers['x-tenant-id'] as string }),\n * })\n * ```\n *\n * `defineHttpContextDecorator` removes that ceremony — the spec is typed\n * against `RequestContext` from the start, so resolvers can read `ctx.req`,\n * `ctx.headers`, `ctx.params`, etc. without a cast or generic dance:\n *\n * ```ts\n * import { defineHttpContextDecorator } from '@forinda/kickjs'\n *\n * const LoadTenant = defineHttpContextDecorator({\n *   key: 'tenant',\n *   resolve: (ctx) => ({ id: ctx.req.headers['x-tenant-id'] as string }),\n * })\n *\n * // Parameterised — the positional form forces you to also spell `K`\n * // and `D`, which loses automatic `deps` inference. Prefer the curried\n * // `.withParams<P>()` entry point below.\n * const LoadTenantParameterised = defineHttpContextDecorator<\n *   'tenant',\n *   Record<string, never>,\n *   { source: 'header' | 'subdomain' }\n * >({\n *   key: 'tenant',\n *   paramDefaults: { source: 'header' },\n *   resolve: (ctx, _deps, params) => {\n *     // params.source narrows inside `if` branches.\n *   },\n * })\n *\n * // Parameterised + deps — only `P` is spelled; `K` and `D` infer from\n * // the spec, so `deps.repo` is fully typed in the resolver.\n * const LoadTenantWithRepo = defineHttpContextDecorator.withParams<{\n *   source: 'header' | 'subdomain'\n * }>()({\n *   key: 'tenant',\n *   deps: { repo: TENANT_REPO },\n *   paramDefaults: { source: 'header' },\n *   resolve: (ctx, { repo }, params) =>\n *     repo.findFor(ctx.req.headers['x-tenant-id'] as string, params.source),\n * })\n * ```\n *\n * Use {@link defineContextDecorator} directly when authoring contributors\n * for non-HTTP transports or when you want to share one contributor across\n * HTTP + WS + queue (the resolver then has to stick to the\n * `ExecutionContext` surface — `ctx.get` / `ctx.set` / `ctx.requestId`).\n */\n\nimport {\n  defineContextDecorator,\n  type ContextDecorator,\n  type ContextDecoratorSpec,\n  type ContextMetaKey,\n  type DepValue,\n} from '../core/context-decorator'\nimport type { RequestContext } from './context'\n\n/**\n * Curried form returned by {@link DefineHttpContextDecoratorFn.withParams}.\n * Spell only the per-call params shape `P`; `K` and `D` are inferred\n * from the spec, and `Ctx` is locked to `RequestContext`.\n */\nexport interface DefineHttpContextDecoratorWithParams<P extends Record<string, unknown>> {\n  <K extends ContextMetaKey, D extends Record<string, DepValue> = Record<string, never>>(\n    spec: ContextDecoratorSpec<K, D, P, RequestContext>,\n  ): ContextDecorator<K, D, P, RequestContext>\n}\n\n/**\n * Public shape of {@link defineHttpContextDecorator} — the positional\n * call signature plus the curried `.withParams<P>()` helper that fixes\n * partial-inference for the parameterised case.\n */\nexport interface DefineHttpContextDecoratorFn {\n  <\n    K extends ContextMetaKey,\n    D extends Record<string, DepValue> = Record<string, never>,\n    P extends Record<string, unknown> = Record<string, never>,\n  >(\n    spec: ContextDecoratorSpec<K, D, P, RequestContext>,\n  ): ContextDecorator<K, D, P, RequestContext>\n\n  /**\n   * Curried entry point. Spell only `P`; `K` and `D` infer from the\n   * spec. `Ctx` is locked to `RequestContext`.\n   *\n   * ```ts\n   * const LoadTenant = defineHttpContextDecorator.withParams<{\n   *   source: 'header' | 'subdomain'\n   * }>()({\n   *   key: 'tenant',\n   *   deps: { repo: TENANT_REPO },           // D inferred\n   *   paramDefaults: { source: 'header' },\n   *   resolve: (ctx, { repo }, params) => repo.findFor(ctx, params),\n   * })\n   * ```\n   */\n  withParams<P extends Record<string, unknown>>(): DefineHttpContextDecoratorWithParams<P>\n}\n\nfunction defineHttpContextDecoratorImpl<\n  K extends ContextMetaKey,\n  D extends Record<string, DepValue> = Record<string, never>,\n  P extends Record<string, unknown> = Record<string, never>,\n>(spec: ContextDecoratorSpec<K, D, P, RequestContext>): ContextDecorator<K, D, P, RequestContext> {\n  return defineContextDecorator<K, D, P, RequestContext>(spec)\n}\n\nexport const defineHttpContextDecorator: DefineHttpContextDecoratorFn = Object.freeze(\n  Object.assign(defineHttpContextDecoratorImpl, {\n    withParams: <P extends Record<string, unknown>>(): DefineHttpContextDecoratorWithParams<P> => {\n      return <K extends ContextMetaKey, D extends Record<string, DepValue> = Record<string, never>>(\n        spec: ContextDecoratorSpec<K, D, P, RequestContext>,\n      ): ContextDecorator<K, D, P, RequestContext> => defineHttpContextDecoratorImpl<K, D, P>(spec)\n    },\n  }),\n) as DefineHttpContextDecoratorFn\n","import type { Request, Response, NextFunction } from 'express'\nimport { requestStore } from '../request-store'\n\nimport { randomHex } from '../../core/web-crypto'\n\n/**\n * W3C Trace Context header name.\n * @see https://www.w3.org/TR/trace-context/#traceparent-header\n */\nexport const TRACEPARENT_HEADER = 'traceparent'\n\n/** Regex for a valid W3C traceparent: {version}-{trace-id}-{parent-id}-{flags} */\nconst TRACEPARENT_RE = /^([0-9a-f]{2})-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/\n\nexport interface TraceContextOptions {\n  /**\n   * When true, respond with a `traceresponse` header containing the trace ID.\n   * Useful for debugging. Default: false.\n   */\n  propagateResponse?: boolean\n}\n\n/**\n * Parsed W3C trace context fields.\n */\nexport interface TraceContext {\n  /** W3C traceparent version (usually '00') */\n  version: string\n  /** 32-hex-char distributed trace ID */\n  traceId: string\n  /** 16-hex-char parent span ID */\n  parentSpanId: string\n  /** 2-hex-char trace flags */\n  flags: string\n}\n\n/**\n * Generate a random 32-hex-character trace ID.\n */\nfunction generateTraceId(): string {\n  return randomHex(16)\n}\n\n/**\n * Generate a random 16-hex-character span ID.\n */\nfunction generateSpanId(): string {\n  return randomHex(8)\n}\n\n/**\n * Parse a W3C traceparent header value.\n * Returns null if the format is invalid.\n */\nexport function parseTraceparent(header: string): TraceContext | null {\n  const match = TRACEPARENT_RE.exec(header.trim().toLowerCase())\n  if (!match) return null\n\n  const version = match[1]\n  const traceId = match[2]\n  const parentSpanId = match[3]\n  const flags = match[4]\n\n  // W3C spec: version ff is invalid, all-zero trace-id and parent-id are invalid\n  if (\n    version === 'ff' ||\n    traceId === '00000000000000000000000000000000' ||\n    parentSpanId === '0000000000000000'\n  ) {\n    return null\n  }\n\n  return { version, traceId, parentSpanId, flags }\n}\n\n/**\n * Middleware that extracts W3C `traceparent` header and stores trace context\n * in the request's AsyncLocalStorage store.\n *\n * If no valid `traceparent` header is present, a new traceId is generated\n * so that every request always has a trace ID available for correlation.\n *\n * Must be mounted **after** `requestScopeMiddleware()` (which creates the store).\n *\n * @example\n * ```ts\n * bootstrap({\n *   middlewares: [\n *     requestScopeMiddleware(),\n *     traceContext(),          // extracts or generates traceId\n *     requestLogger(),\n *     express.json(),\n *   ],\n * })\n * ```\n */\nexport function traceContext(options: TraceContextOptions = {}) {\n  return (req: Request, res: Response, next: NextFunction) => {\n    const store = requestStore.getStore()\n\n    const traceparentHeader = req.headers[TRACEPARENT_HEADER]\n    const raw = Array.isArray(traceparentHeader) ? traceparentHeader[0] : traceparentHeader\n    const parsed = raw ? parseTraceparent(raw) : null\n\n    const traceId = parsed?.traceId ?? generateTraceId()\n    const spanId = generateSpanId()\n\n    // Attach to the request store so logger + downstream code can access it\n    if (store) {\n      store.values.set('traceId', traceId)\n      store.values.set('spanId', spanId)\n      if (parsed) {\n        store.values.set('parentSpanId', parsed.parentSpanId)\n        store.values.set('traceFlags', parsed.flags)\n        store.values.set('traceVersion', parsed.version)\n      }\n    }\n\n    // Also expose on req for convenience\n    ;(req as any).traceId = traceId\n    ;(req as any).spanId = spanId\n\n    if (options.propagateResponse) {\n      res.setHeader('traceresponse', traceId)\n    }\n\n    next()\n  }\n}\n"],"mappings":";;;;;;;;;;ypIA2BA,IAAa,WAAb,cAAgC,KAAsB,CASpD,MAAM,OAA8B,CAElC,OADA,KAAK,KAAK,MAAM,EACT,IACT,CACF,EA8BA,SAAgB,cAAc,GAAG,QAAuC,CACtE,IAAM,KAAO,IAAI,WACjB,IAAK,IAAM,SAAS,QAAS,KAAK,KAAK,KAAK,EAC5C,OAAO,IACT,CCnCA,IAAa,iBAAb,cAAsC,KAAM,CACd,YAA5B,YAAY,YAAqC,CAC/C,MAAM,oBAAoB,YAAY,6BAA6B,EADzC,KAAA,YAAA,YAE1B,KAAK,KAAO,kBACd,CACF,EAEa,eAAb,KAA4B,CAaR,KAZlB,MAAqC,SACrC,SAAmB,EACnB,UAAoB,EACpB,iBAA2B,EAC3B,YACA,SAEA,iBACA,aACA,YAEA,YACE,KACA,QACA,CAFgB,KAAA,KAAA,KAGhB,KAAK,iBAAmB,QAAQ,iBAChC,KAAK,aAAe,QAAQ,aAC5B,KAAK,YAAc,QAAQ,aAAe,CAC5C,CAMA,MAAM,QAAW,GAAkC,CAOjD,GANA,KAAK,0BAA0B,EAE3B,KAAK,QAAU,QAIf,KAAK,QAAU,aAAe,KAAK,kBAAoB,KAAK,YAC9D,MAAM,IAAI,iBAAiB,KAAK,IAAI,EAGlC,KAAK,QAAU,aACjB,KAAK,mBAGP,GAAI,CACF,IAAM,OAAS,MAAM,GAAG,EAExB,OADA,KAAK,UAAU,EACR,MACT,OAAS,MAAO,CAEd,MADA,KAAK,UAAU,EACT,KACR,CACF,CAGA,UAAgC,CAE9B,OADA,KAAK,0BAA0B,EACxB,KAAK,KACd,CAGA,UAAgC,CAE9B,OADA,KAAK,0BAA0B,EACxB,CACL,SAAU,KAAK,SACf,UAAW,KAAK,UAChB,MAAO,KAAK,MACZ,GAAI,KAAK,YAAc,CAAE,YAAa,KAAK,WAAY,EAAI,CAAC,CAC9D,CACF,CAGA,OAAc,CACZ,KAAK,MAAQ,SACb,KAAK,SAAW,EAChB,KAAK,UAAY,EACjB,KAAK,iBAAmB,EACxB,KAAK,YAAc,IAAA,GACnB,KAAK,SAAW,IAAA,EAClB,CAEA,WAA0B,CACpB,KAAK,QAAU,cAEjB,KAAK,MAAQ,SACb,KAAK,SAAW,EAChB,KAAK,iBAAmB,EACxB,KAAK,SAAW,IAAA,IAElB,KAAK,WACP,CAEA,WAA0B,CACxB,KAAK,WACL,KAAK,YAAc,IAAI,KAEnB,KAAK,QAAU,aAEjB,KAAK,MAAQ,OACb,KAAK,SAAW,KAAK,IAAI,EACzB,KAAK,iBAAmB,GACf,KAAK,QAAU,UAAY,KAAK,UAAY,KAAK,mBAC1D,KAAK,MAAQ,OACb,KAAK,SAAW,KAAK,IAAI,EAE7B,CAEA,2BAA0C,CACpC,KAAK,QAAU,QAAU,KAAK,UAAY,MACxC,KAAK,IAAI,EAAI,KAAK,UAAY,KAAK,eACrC,KAAK,MAAQ,YACb,KAAK,iBAAmB,EAG9B,CACF,EC5FA,MAAM,aACJ,SAA6B,CAAC,EAC9B,UAA8B,CAAC,KAClB,CAAE,GAAG,SAAU,GAAG,SAAU,GAErC,aAAe,KAAc,QAA0B,GAAG,KAAK,GAAG,QAuBxE,SAAgB,aACd,QACwB,CACxB,IAAM,WACJ,aACA,OACA,YACe,CACf,IAAM,OAAS,YAAY,QAAQ,SAAU,SAAS,EAGhD,MAAQ,QAAQ,MAAM,OAAQ,CAAE,KAAM,aAAc,MAAO,CAAC,EAElE,MADA,OAAM,KAAO,aACN,KACT,EAEM,YAAc,aAAsB,OAAkD,CAC1F,IAAI,MAEE,YAAc,KAAO,YAA8C,CACvE,GAAI,MAAO,OAAO,MAClB,IAAM,MAAQ,KAAK,QAAU,CAAC,EAAA,CAAG,IAAK,KAAQ,UAAU,QAAQ,GAAY,CAAC,EACvE,OAAS,MAAM,KAAK,WAAW,GAAG,IAAI,EAE5C,MADA,OAAQ,UAAU,aAAc,GAAO,MAA0B,EAC1D,KACT,EAEA,MAAO,CACL,KAAM,aACN,MAAM,QAAQ,UAAsB,CAClC,IAAM,MAAQ,MAAM,YAAY,SAAS,EAIzC,MAAM,WAAW,SAAS,EAC1B,MAAM,MAAM,UAAU,SAAS,CACjC,EACA,MAAM,UAAW,CACf,MAAM,OAAO,WAAW,CAC1B,CACF,CACF,EAEM,SAAY,QAChB,UAAU,QAAQ,KAAM,GAAO,MAAM,GASvC,MAPA,SAAQ,QAAU,UAAmB,SACnC,UAAU,YAAY,QAAQ,KAAM,SAAS,EAAG,GAAM,MAAM,EAE9D,QAAQ,MAAS,MAAsC,WAAW,QAAQ,KAAM,IAAI,EAEpF,OAAO,eAAe,QAAS,aAAc,CAAE,MAAO,OAAO,OAAO,CAAE,GAAG,OAAQ,CAAC,CAAE,CAAC,EAE9E,OACT,CCfA,SAAgB,mBAAmB,KAAc,KAA+B,CAQhF,CClFA,SAAgB,cAAc,QAA0C,CACtE,IAAI,IAEE,WACJ,OAAS,SAAY,CACnB,IAAM,SAAW,IAAI,YAAY,OAAO,EACxC,GAAI,CACF,MAAM,SAAS,mBAAmB,CACpC,OAAS,IAAK,CAMZ,KAFA,KAAM,IAAA,GACN,MAAM,SAAS,SAAS,CAAC,CAAC,UAAY,CAAC,CAAC,EAClC,GACR,CACA,OAAO,QACT,EAAA,CAAG,EACI,KAGT,MAAO,CACL,MAEA,MAAM,MAAM,QAAS,CACnB,OAAQ,MAAM,MAAM,EAAA,CAAG,MAAM,OAAO,CACtC,EAEA,MAAM,KAAK,IAAK,IAAK,EAEnB,MADuB,MAAM,EAAA,CACpB,OAAO,IAAK,GAAG,CAC1B,EAEA,MAAM,OAAQ,CACZ,IAAM,QAAU,IAChB,IAAM,IAAA,GACF,SAAS,MAAO,MAAM,QAAA,CAAS,SAAS,CAC9C,CACF,CACF,CCkBA,SAAS,+BAIP,KAAgG,CAChG,OAAO,uBAAgD,IAAI,CAC7D,CAEA,MAAa,2BAA2D,OAAO,OAC7E,OAAO,OAAO,+BAAgC,CAC5C,eAEI,MAC8C,+BAAwC,IAAI,CAEhG,CAAC,CACH,EC1Ha,mBAAqB,cAG5B,eAAiB,8DA2BvB,SAAS,iBAA0B,CACjC,OAAO,UAAU,EAAE,CACrB,CAKA,SAAS,gBAAyB,CAChC,OAAO,UAAU,CAAC,CACpB,CAMA,SAAgB,iBAAiB,OAAqC,CACpE,IAAM,MAAQ,eAAe,KAAK,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,EAC7D,GAAI,CAAC,MAAO,OAAO,KAEnB,IAAM,QAAU,MAAM,GAChB,QAAU,MAAM,GAChB,aAAe,MAAM,GACrB,MAAQ,MAAM,GAWpB,OAPE,UAAY,MACZ,UAAY,oCACZ,eAAiB,mBAEV,KAGF,CAAE,QAAS,QAAS,aAAc,KAAM,CACjD,CAuBA,SAAgB,aAAa,QAA+B,CAAC,EAAG,CAC9D,OAAQ,IAAc,IAAe,OAAuB,CAC1D,IAAM,MAAQ,aAAa,SAAS,EAE9B,kBAAoB,IAAI,QAAQ,oBAChC,IAAM,MAAM,QAAQ,iBAAiB,EAAI,kBAAkB,GAAK,kBAChE,OAAS,IAAM,iBAAiB,GAAG,EAAI,KAEvC,QAAU,QAAQ,SAAW,gBAAgB,EAC7C,OAAS,eAAe,EAG1B,QACF,MAAM,OAAO,IAAI,UAAW,OAAO,EACnC,MAAM,OAAO,IAAI,SAAU,MAAM,EAC7B,SACF,MAAM,OAAO,IAAI,eAAgB,OAAO,YAAY,EACpD,MAAM,OAAO,IAAI,aAAc,OAAO,KAAK,EAC3C,MAAM,OAAO,IAAI,eAAgB,OAAO,OAAO,IAKlD,IAAa,QAAU,QACvB,IAAa,OAAS,OAEnB,QAAQ,mBACV,IAAI,UAAU,gBAAiB,OAAO,EAGxC,KAAK,CACP,CACF"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../src/core/define-modules.ts","../src/core/circuit-breaker.ts","../src/core/define-plugin.ts","../src/core/augmentation.ts","../src/http/handler.ts","../src/http/define-http-context-decorator.ts","../src/http/middleware/trace-context.ts"],"sourcesContent":["import type { AppModuleEntry } from './app-module'\n\n/**\n * Chainable registry returned by {@link defineModules}. Extends\n * `Array<AppModuleEntry>` so it drops into `bootstrap({ modules })`\n * unchanged — the framework loader already iterates the array, so a\n * `ModuleList` IS a valid `modules` value with no special handling.\n *\n * The added affordance is `.mount(module)` returning `this` so\n * adopters can build the list fluently:\n *\n * ```ts\n * const modules = defineModules()\n *   .mount(HelloModule())\n *   .mount(AdminModule())\n *\n * bootstrap({ modules })\n * ```\n *\n * **Why not just use a plain array?** Two reasons. First, the\n * fluent shape reads more naturally for module-list construction —\n * adopters used to `definePlugin().scoped(...)` / `defineAdapter(...)`\n * see the same call-then-call pattern. Second, the registry is the\n * stable extension point: a future `.use(module)` for non-HTTP\n * modules (queues, cron, workers) lands as a method on `ModuleList`\n * without breaking the `Array<AppModuleEntry>` superclass contract.\n */\nexport class ModuleList extends Array<AppModuleEntry> {\n  /**\n   * Append a module to the list. Returns `this` for chaining.\n   *\n   * Accepts both class form (`SomeModule extends AppModule`) and\n   * `defineModule` factory output — same as the underlying\n   * `bootstrap({ modules })` array. The framework loader\n   * discriminates `typeof entry === 'function'` at boot.\n   */\n  mount(module: AppModuleEntry): this {\n    this.push(module)\n    return this\n  }\n}\n\n/**\n * Build a {@link ModuleList} for the application. Optional vararg\n * lets adopters seed the list inline; subsequent `.mount()` calls\n * append.\n *\n * @example\n * ```ts\n * import { bootstrap, defineModules } from '@forinda/kickjs'\n * import { HelloModule } from './modules/hello/hello.module'\n * import { AdminModule } from './modules/admin/admin.module'\n *\n * // Fluent — most common\n * const modules = defineModules()\n *   .mount(HelloModule())\n *   .mount(AdminModule())\n *\n * // Or seeded inline + chained\n * const modules2 = defineModules(HelloModule()).mount(AdminModule())\n *\n * await bootstrap({ modules })\n * ```\n *\n * The returned value is an `AppModuleEntry[]` subclass — `bootstrap`\n * accepts it directly without any special-casing. For conditional /\n * dynamic registration at bootstrap time (env flags, runtime config,\n * tenant lists), use the `setup(registry)` callback on `bootstrap`\n * instead — both surfaces compose.\n */\nexport function defineModules(...initial: AppModuleEntry[]): ModuleList {\n  const list = new ModuleList()\n  for (const entry of initial) list.push(entry)\n  return list\n}\n","/**\n * Circuit Breaker pattern for external service calls.\n *\n * Protects your application from cascading failures when downstream\n * services are unhealthy by short-circuiting requests after a\n * configurable failure threshold.\n *\n * @example\n * ```ts\n * const breaker = new CircuitBreaker('payment-api', {\n *   failureThreshold: 5,\n *   resetTimeout: 30_000,\n * })\n *\n * const result = await breaker.execute(() => fetch('https://payment.example.com/charge'))\n * ```\n */\n\nexport type CircuitBreakerState = 'closed' | 'open' | 'half_open'\n\nexport interface CircuitBreakerOptions {\n  /** Number of consecutive failures before the circuit opens. */\n  failureThreshold: number\n  /** Milliseconds to wait before transitioning from OPEN to HALF_OPEN. */\n  resetTimeout: number\n  /** Max requests allowed in HALF_OPEN state before deciding (default 1). */\n  halfOpenMax?: number\n}\n\nexport interface CircuitBreakerStats {\n  failures: number\n  successes: number\n  state: CircuitBreakerState\n  lastFailure?: Date\n}\n\n/**\n * Error thrown when the circuit is open and calls are being rejected.\n */\nexport class CircuitOpenError extends Error {\n  constructor(public readonly breakerName: string) {\n    super(`Circuit breaker \"${breakerName}\" is open — request rejected`)\n    this.name = 'CircuitOpenError'\n  }\n}\n\nexport class CircuitBreaker {\n  private state: CircuitBreakerState = 'closed'\n  private failures = 0\n  private successes = 0\n  private halfOpenAttempts = 0\n  private lastFailure?: Date\n  private openedAt?: number\n\n  private readonly failureThreshold: number\n  private readonly resetTimeout: number\n  private readonly halfOpenMax: number\n\n  constructor(\n    public readonly name: string,\n    options: CircuitBreakerOptions,\n  ) {\n    this.failureThreshold = options.failureThreshold\n    this.resetTimeout = options.resetTimeout\n    this.halfOpenMax = options.halfOpenMax ?? 1\n  }\n\n  /**\n   * Execute an async function through the circuit breaker.\n   * Throws `CircuitOpenError` if the circuit is open.\n   */\n  async execute<T>(fn: () => Promise<T>): Promise<T> {\n    this.maybeTransitionToHalfOpen()\n\n    if (this.state === 'open') {\n      throw new CircuitOpenError(this.name)\n    }\n\n    if (this.state === 'half_open' && this.halfOpenAttempts >= this.halfOpenMax) {\n      throw new CircuitOpenError(this.name)\n    }\n\n    if (this.state === 'half_open') {\n      this.halfOpenAttempts++\n    }\n\n    try {\n      const result = await fn()\n      this.onSuccess()\n      return result\n    } catch (error) {\n      this.onFailure()\n      throw error\n    }\n  }\n\n  /** Returns the current circuit state. */\n  getState(): CircuitBreakerState {\n    this.maybeTransitionToHalfOpen()\n    return this.state\n  }\n\n  /** Returns current statistics. */\n  getStats(): CircuitBreakerStats {\n    this.maybeTransitionToHalfOpen()\n    return {\n      failures: this.failures,\n      successes: this.successes,\n      state: this.state,\n      ...(this.lastFailure ? { lastFailure: this.lastFailure } : {}),\n    }\n  }\n\n  /** Manually reset the circuit breaker to CLOSED state. */\n  reset(): void {\n    this.state = 'closed'\n    this.failures = 0\n    this.successes = 0\n    this.halfOpenAttempts = 0\n    this.lastFailure = undefined\n    this.openedAt = undefined\n  }\n\n  private onSuccess(): void {\n    if (this.state === 'half_open') {\n      // Recovery confirmed — close the circuit\n      this.state = 'closed'\n      this.failures = 0\n      this.halfOpenAttempts = 0\n      this.openedAt = undefined\n    }\n    this.successes++\n  }\n\n  private onFailure(): void {\n    this.failures++\n    this.lastFailure = new Date()\n\n    if (this.state === 'half_open') {\n      // Recovery failed — re-open\n      this.state = 'open'\n      this.openedAt = Date.now()\n      this.halfOpenAttempts = 0\n    } else if (this.state === 'closed' && this.failures >= this.failureThreshold) {\n      this.state = 'open'\n      this.openedAt = Date.now()\n    }\n  }\n\n  private maybeTransitionToHalfOpen(): void {\n    if (this.state === 'open' && this.openedAt != null) {\n      if (Date.now() - this.openedAt >= this.resetTimeout) {\n        this.state = 'half_open'\n        this.halfOpenAttempts = 0\n      }\n    }\n  }\n}\n","import type { Container } from './container'\nimport type { KickPlugin } from './plugin'\n\n/**\n * Options passed to {@link definePlugin}. Mirrors the spec in\n * `architecture.md` §21.3.1 + §21.2.2 (Phase A \"lite\").\n */\nexport interface DefinePluginOptions<TConfig> {\n  /** Stable identity used for logging, `dependsOn` lookups, and `.scoped()` namespacing. */\n  name: string\n\n  /** Optional plugin version — surfaced to DevTools and `kick add` compatibility checks (Phase B). */\n  version?: string\n\n  /**\n   * Peer-version ranges this plugin needs from the framework or other\n   * plugins. Recorded as metadata; runtime enforcement lands in §21.4.4.\n   */\n  requires?: { kickjs?: string }\n\n  /** Default config merged under any caller overrides. */\n  defaults?: Partial<TConfig>\n\n  /** Builds the underlying {@link KickPlugin} from the resolved config. */\n  build(config: TConfig, ctx: BuildContext): Omit<KickPlugin, 'name'>\n}\n\n/**\n * Hook context handed to a plugin/adapter `build` function. `name` is the\n * resolved instance name (the bare definition name for the bare call,\n * or `${defName}:${scope}` for `.scoped()`). `scoped` is the discriminator\n * authors use to namespace DI tokens or resource keys.\n */\nexport interface BuildContext {\n  name: string\n  scoped: boolean\n}\n\n/**\n * Async-config form of a plugin or adapter — `inject` lists DI tokens to\n * resolve from the container, then `useFactory` produces the config.\n *\n * Plugins resolve this lazily inside `onReady`, so any module/adapter/\n * middleware/contributor a plugin contributes via `build` is **not\n * available** when `.async()` is used. Use the bare/`.scoped()` form for\n * plugins that need to register modules or middleware.\n */\nexport interface PluginAsyncOptions<TConfig> {\n  inject?: ReadonlyArray<unknown>\n  useFactory(...deps: any[]): TConfig | Promise<TConfig>\n}\n\n/**\n * Factory returned by {@link definePlugin}. Callable form is the singleton\n * (`AuthPlugin(config)`); `.scoped()` and `.async()` are the multi-instance\n * and deferred-config forms.\n */\nexport interface PluginFactory<TConfig> {\n  (config?: Partial<TConfig>): KickPlugin\n  scoped(scopeName: string, config?: Partial<TConfig>): KickPlugin\n  async(opts: PluginAsyncOptions<TConfig>): KickPlugin\n  /** Read-only access to the original definition — useful for DevTools introspection. */\n  readonly definition: Readonly<DefinePluginOptions<TConfig>>\n}\n\nconst mergeConfig = <TConfig>(\n  defaults: Partial<TConfig> = {},\n  overrides: Partial<TConfig> = {},\n): TConfig => ({ ...defaults, ...overrides }) as TConfig\n\nconst composeName = (base: string, scope: string): string => `${base}:${scope}`\n\n/**\n * Build a {@link KickPlugin} factory from a typed definition. See\n * `architecture.md` §21.2.2 for the design rationale.\n *\n * @example\n * ```ts\n * const FlagsPlugin = definePlugin<FlagsConfig>({\n *   name: 'FlagsPlugin',\n *   defaults: { defaultTtl: 60_000 },\n *   build(config) {\n *     return {\n *       register(container) {\n *         container.registerInstance(FLAGS, makeProvider(config))\n *       },\n *     }\n *   },\n * })\n *\n * bootstrap({ plugins: [FlagsPlugin({ provider: launchDarkly })] })\n * ```\n */\nexport function definePlugin<TConfig = Record<string, unknown>>(\n  options: DefinePluginOptions<TConfig>,\n): PluginFactory<TConfig> {\n  const buildSync = (\n    instanceName: string,\n    scoped: boolean,\n    overrides?: Partial<TConfig>,\n  ): KickPlugin => {\n    const config = mergeConfig(options.defaults, overrides)\n    // Mutate `name` on the build result instead of spreading — spread\n    // strips prototype methods when `build()` returns a class instance.\n    const built = options.build(config, { name: instanceName, scoped }) as KickPlugin\n    built.name = instanceName\n    return built\n  }\n\n  const buildAsync = (instanceName: string, opts: PluginAsyncOptions<TConfig>): KickPlugin => {\n    let inner: KickPlugin | undefined\n\n    const ensureInner = async (container: Container): Promise<KickPlugin> => {\n      if (inner) return inner\n      const deps = (opts.inject ?? []).map((tok) => container.resolve(tok as never))\n      const config = await opts.useFactory(...deps)\n      inner = buildSync(instanceName, false, config as Partial<TConfig>)\n      return inner\n    }\n\n    return {\n      name: instanceName,\n      async onReady(container: Container) {\n        const built = await ensureInner(container)\n        // Run the inner plugin's register() now that we have the config —\n        // late but better than never; `.async()` plugins skip the early\n        // module/middleware contribution surface by design.\n        built.register?.(container)\n        await built.onReady?.(container)\n      },\n      async shutdown() {\n        await inner?.shutdown?.()\n      },\n    }\n  }\n\n  const factory = ((config?: Partial<TConfig>) =>\n    buildSync(options.name, false, config)) as PluginFactory<TConfig>\n\n  factory.scoped = (scopeName: string, config?: Partial<TConfig>) =>\n    buildSync(composeName(options.name, scopeName), true, config)\n\n  factory.async = (opts: PluginAsyncOptions<TConfig>) => buildAsync(options.name, opts)\n\n  Object.defineProperty(factory, 'definition', { value: Object.freeze({ ...options }) })\n\n  return factory\n}\n","/**\n * Augmentation registry — runtime no-op + the canonical\n * `KickJsPluginRegistry` interface that `kick typegen` augments.\n *\n * See `architecture.md` §21.2.1 (typegen for `dependsOn`) and §21.3.3\n * (standardized augmentation registry) for the design rationale.\n *\n * @module @forinda/kickjs/core/augmentation\n */\n\n/**\n * Marker interface that lists every plugin/adapter in the project. The\n * keys are the literal `name` field passed to `defineAdapter` /\n * `definePlugin` (or declared on a `class implements AppAdapter`); the\n * values are the kind tag (`'plugin' | 'adapter'`).\n *\n * The framework ships this empty. `kick typegen` augments it from\n * source so `keyof KickJsPluginRegistry` resolves to a string-literal\n * union of every name in scope — and therefore so do `dependsOn`\n * declarations on plugins/adapters.\n */\nexport interface KickJsPluginRegistry {}\n\n/**\n * Resolves to a string-literal union of every registered plugin/adapter\n * name when the project's typegen has populated `KickJsPluginRegistry`,\n * or to `string` when the registry is empty (no typegen pass yet).\n *\n * Falling back to `string` keeps fresh projects compiling — the typegen\n * narrowing is a progressive enhancement, not a hard prerequisite.\n */\nexport type KickJsPluginName = keyof KickJsPluginRegistry extends never\n  ? string\n  : keyof KickJsPluginRegistry & string\n\n/**\n * Metadata attached to a `defineAugmentation` call. The fields are\n * documentation-only — `kick typegen` surfaces them in the generated\n * `.kickjs/types/kick__augmentations.d.ts` so adopters can browse every\n * augmentable interface from one place.\n *\n * `description` and `example` may both be multi-line — typegen preserves\n * line breaks when rendering them as JSDoc. There is no upper limit on\n * the example size; entire shape definitions or worked snippets are fine.\n */\nexport interface AugmentationMeta {\n  /**\n   * Free-form description of what the augmentation customises. May be\n   * multi-line — newlines are preserved in the generated JSDoc.\n   */\n  description?: string\n  /**\n   * TS snippet showing a typical shape. May be multi-line; rendered\n   * inside a fenced code block in the generated catalogue. Use this\n   * for anything from `'{ foo: string }'` up to a full interface body\n   * — typegen no longer flattens newlines.\n   */\n  example?: string\n}\n\n/**\n * @deprecated Since 7.2. This was tooling for a time when Context\n * Contributors were still settling — a catalogue so adopters could discover\n * which interfaces were augmentable. Contributors are a stable, typed API now\n * (`defineContextDecorator`, `ContextMeta`), and the catalogue adds a second\n * call that must be kept in step with the `declare module` block for no\n * type-level benefit.\n *\n * Nothing breaks: `kick typegen` still discovers the call and still writes the\n * catalogue. Just drop it — the `declare module '@forinda/kickjs'` block alone\n * gives you the types, which is all it ever gave you.\n *\n * What it actually emits, for the record: one empty marker interface per call\n * in `.kickjs/types/kick__augmentations.d.ts` —\n *\n * ```ts\n * // from defineAugmentation('ContextMeta', { description, example })\n * export interface ContextMetaAugmentation {}\n * ```\n *\n * with your `description` / `example` rendered as its JSDoc and a `@see` back\n * to the call site. The interface is empty and unreferenced; nothing consumes\n * it at type level.\n *\n * Advertise an augmentable interface so `kick typegen` can list it in\n * `.kickjs/types/kick__augmentations.d.ts` for project-wide discovery.\n *\n * **This function is a runtime AND type-level no-op.** It does NOT\n * augment the interface for TypeScript. The actual augmentation is\n * the `declare module` block — `defineAugmentation` only adds an\n * entry to the typegen catalogue (`.kickjs/types/kick__augmentations.d.ts`)\n * so other contributors / adopters can find the interface and know its\n * expected shape.\n *\n * Both calls are needed:\n *\n * ```ts\n * import { defineAugmentation } from '@forinda/kickjs'\n *\n * // (1) The actual TS augmentation — what `ctx.get('tenant')` reads.\n * declare module '@forinda/kickjs' {\n *   interface ContextMeta {\n *     tenant: { id: string; name: string }\n *   }\n * }\n *\n * // (2) Catalogue entry — what `kick typegen` lists in\n * //     `.kickjs/types/kick__augmentations.d.ts` for browseability.\n * defineAugmentation('ContextMeta', {\n *   description: 'Tenant resolved from x-tenant-id by TenantAdapter',\n *   example: `{\n *     tenant: {\n *       id: string\n *       name: string\n *       plan: 'free' | 'pro' | 'enterprise'\n *       featureFlags: Record<string, boolean>\n *     }\n *   }`,\n * })\n * ```\n *\n * Skip `defineAugmentation` if you don't care about the catalogue — the\n * `declare module` block alone is enough for runtime + type behaviour.\n *\n * @deprecated Low value in practice: it does nothing at runtime or at\n * the type level — the `declare module` block alone gives you the\n * augmentation, and the generated `.kickjs/types/kick__augmentations.d.ts`\n * catalogue it feeds is documentation-only. Prefer a plain\n * `declare module '@forinda/kickjs' { ... }` block and (optionally) a\n * JSDoc comment on your own interface. `defineAugmentation` and the\n * `kick/augmentations` typegen plugin will be removed in a future major.\n */\nexport function defineAugmentation(name: string, meta?: AugmentationMeta): void {\n  // No-op at runtime — `kick typegen` discovers the call statically and\n  // emits the augmentation catalogue. Touch the args so esbuild / tsc\n  // don't drop the call as dead code under aggressive minification\n  // (the marker has to survive the build for static scanners that look\n  // at compiled output, e.g. third-party tools).\n  void name\n  void meta\n}\n","/**\n * The app as a request handler, with no listening server of its own — for\n * platforms that hand you requests instead of a port: Netlify Functions,\n * Vercel Functions, and any other serverless or embedding host.\n *\n * @module @forinda/kickjs/http/handler\n */\nimport type { IncomingMessage, ServerResponse } from 'node:http'\nimport { Application, type ApplicationOptions } from './application'\nimport { forwardBackgroundWork, settleBackgroundWork, type PlatformContext } from './background'\n\n/** A KickJS app exposed as request handlers. See {@link createHandler}. */\nexport interface KickHandler {\n  /**\n   * Web-standard handler: `fetch(Request) → Response`. Netlify Functions,\n   * Vercel's fetch export, and anything else that speaks `Request`.\n   *\n   * Pass the platform context (Netlify's `context`, `{ waitUntil }` from\n   * `@vercel/functions`) so work handed to `ctx.waitUntil()` finishes after\n   * the response instead of being frozen with the instance.\n   */\n  fetch(request: Request, platform?: PlatformContext): Promise<Response>\n  /** Node handler: `(req, res)`. Vercel Node functions, `http.createServer`. */\n  node(req: IncomingMessage, res: ServerResponse, platform?: PlatformContext): Promise<void>\n  /** Set the app up now instead of on the first request (warm-up). */\n  ready(): Promise<Application>\n  /** Shut adapters down and stop the internal forwarding server, if one started. */\n  close(): Promise<void>\n}\n\n/**\n * Build a KickJS app as request handlers instead of a listening server.\n *\n * Takes the same options as `bootstrap()`. The app is set up once per process\n * (per function instance), lazily on the first request, and reused after that.\n * Nothing listens on a port, `afterStart` does not run, and no process signal\n * handlers are registered — the platform owns the process.\n *\n * `fetch` uses the runtime's own fetch when it has one (the h3 v2 runtime).\n * Runtimes built on Node request/response objects — Express, the default —\n * are served through a server bound to `127.0.0.1` on a random port inside the\n * same process, started on first use: the `Request` is forwarded to it and its\n * response returned. Request bodies are buffered on that path; response bodies\n * stream. Adapters that rewrite the `res` prototype (Express does) make a\n * direct Request→`res` bridge unreliable, which is why this forwards instead.\n *\n * One handler per process: the DI container is process-wide.\n *\n * @example\n * ```ts\n * // server/src/serverless.ts\n * import 'reflect-metadata'\n * import './config'\n * import { createHandler } from '@forinda/kickjs'\n * import { modules } from './modules'\n *\n * export const handler = createHandler({ modules })\n *\n * // netlify/functions/api.mjs\n * export default (request, context) => handler.fetch(request, context)\n * export const config = { path: '/api/*' }\n * ```\n */\nexport function createHandler(options: ApplicationOptions): KickHandler {\n  let app: Promise<Application> | undefined\n\n  const ready = (): Promise<Application> => {\n    app ??= (async () => {\n      const instance = new Application(options)\n      try {\n        await instance.startWithoutServer()\n      } catch (err) {\n        // A failed setup (a database that was briefly down, say) is retried on\n        // the next request. Shut this attempt down first so its adapters don't\n        // stay live next to the retry's.\n        app = undefined\n        await instance.shutdown().catch(() => {})\n        throw err\n      }\n      return instance\n    })()\n    return app\n  }\n\n  return {\n    ready,\n\n    async fetch(request, platform) {\n      const response = await (await ready()).fetch(request)\n      forwardBackgroundWork(platform)\n      return response\n    },\n\n    async node(req, res, platform) {\n      const instance = await ready()\n      instance.handle(req, res)\n      if (platform?.waitUntil) {\n        // The response is written asynchronously: start settling only once it\n        // has gone out, so work the handler registered along the way is included.\n        const sent = new Promise<void>((resolve) => res.once('close', () => resolve()))\n        platform.waitUntil(sent.then(settleBackgroundWork))\n      }\n    },\n\n    async close() {\n      const current = app\n      app = undefined\n      if (current) await (await current).shutdown()\n    },\n  }\n}\n","/**\n * HTTP-flavoured wrapper around {@link defineContextDecorator}.\n *\n * The core factory leaves `Ctx` defaulted to {@link ExecutionContext} so the\n * Context Contributor pipeline stays transport-agnostic — future WebSocket,\n * queue, and cron contexts share the same primitive. The cost is that the\n * vast majority of contributors (which are HTTP) have to spell the fourth\n * generic by hand to get `ctx.req` / `ctx.headers` typing:\n *\n * ```ts\n * // Verbose: spell every generic, including the params shape `P`.\n * defineContextDecorator<'tenant', Record<string, never>, Record<string, never>, RequestContext>({\n *   key: 'tenant',\n *   resolve: (ctx) => ({ id: ctx.req.headers['x-tenant-id'] as string }),\n * })\n * ```\n *\n * `defineHttpContextDecorator` removes that ceremony — the spec is typed\n * against `RequestContext` from the start, so resolvers can read `ctx.req`,\n * `ctx.headers`, `ctx.params`, etc. without a cast or generic dance:\n *\n * ```ts\n * import { defineHttpContextDecorator } from '@forinda/kickjs'\n *\n * const LoadTenant = defineHttpContextDecorator({\n *   key: 'tenant',\n *   resolve: (ctx) => ({ id: ctx.req.headers['x-tenant-id'] as string }),\n * })\n *\n * // Parameterised — the positional form forces you to also spell `K`\n * // and `D`, which loses automatic `deps` inference. Prefer the curried\n * // `.withParams<P>()` entry point below.\n * const LoadTenantParameterised = defineHttpContextDecorator<\n *   'tenant',\n *   Record<string, never>,\n *   { source: 'header' | 'subdomain' }\n * >({\n *   key: 'tenant',\n *   paramDefaults: { source: 'header' },\n *   resolve: (ctx, _deps, params) => {\n *     // params.source narrows inside `if` branches.\n *   },\n * })\n *\n * // Parameterised + deps — only `P` is spelled; `K` and `D` infer from\n * // the spec, so `deps.repo` is fully typed in the resolver.\n * const LoadTenantWithRepo = defineHttpContextDecorator.withParams<{\n *   source: 'header' | 'subdomain'\n * }>()({\n *   key: 'tenant',\n *   deps: { repo: TENANT_REPO },\n *   paramDefaults: { source: 'header' },\n *   resolve: (ctx, { repo }, params) =>\n *     repo.findFor(ctx.req.headers['x-tenant-id'] as string, params.source),\n * })\n * ```\n *\n * Use {@link defineContextDecorator} directly when authoring contributors\n * for non-HTTP transports or when you want to share one contributor across\n * HTTP + WS + queue (the resolver then has to stick to the\n * `ExecutionContext` surface — `ctx.get` / `ctx.set` / `ctx.requestId`).\n */\n\nimport {\n  defineContextDecorator,\n  type ContextDecorator,\n  type ContextDecoratorSpec,\n  type ContextMetaKey,\n  type DepValue,\n} from '../core/context-decorator'\nimport type { RequestContext } from './context'\n\n/**\n * Curried form returned by {@link DefineHttpContextDecoratorFn.withParams}.\n * Spell only the per-call params shape `P`; `K` and `D` are inferred\n * from the spec, and `Ctx` is locked to `RequestContext`.\n */\nexport interface DefineHttpContextDecoratorWithParams<P extends Record<string, unknown>> {\n  <K extends ContextMetaKey, D extends Record<string, DepValue> = Record<string, never>>(\n    spec: ContextDecoratorSpec<K, D, P, RequestContext>,\n  ): ContextDecorator<K, D, P, RequestContext>\n}\n\n/**\n * Public shape of {@link defineHttpContextDecorator} — the positional\n * call signature plus the curried `.withParams<P>()` helper that fixes\n * partial-inference for the parameterised case.\n */\nexport interface DefineHttpContextDecoratorFn {\n  <\n    K extends ContextMetaKey,\n    D extends Record<string, DepValue> = Record<string, never>,\n    P extends Record<string, unknown> = Record<string, never>,\n  >(\n    spec: ContextDecoratorSpec<K, D, P, RequestContext>,\n  ): ContextDecorator<K, D, P, RequestContext>\n\n  /**\n   * Curried entry point. Spell only `P`; `K` and `D` infer from the\n   * spec. `Ctx` is locked to `RequestContext`.\n   *\n   * ```ts\n   * const LoadTenant = defineHttpContextDecorator.withParams<{\n   *   source: 'header' | 'subdomain'\n   * }>()({\n   *   key: 'tenant',\n   *   deps: { repo: TENANT_REPO },           // D inferred\n   *   paramDefaults: { source: 'header' },\n   *   resolve: (ctx, { repo }, params) => repo.findFor(ctx, params),\n   * })\n   * ```\n   */\n  withParams<P extends Record<string, unknown>>(): DefineHttpContextDecoratorWithParams<P>\n}\n\nfunction defineHttpContextDecoratorImpl<\n  K extends ContextMetaKey,\n  D extends Record<string, DepValue> = Record<string, never>,\n  P extends Record<string, unknown> = Record<string, never>,\n>(spec: ContextDecoratorSpec<K, D, P, RequestContext>): ContextDecorator<K, D, P, RequestContext> {\n  return defineContextDecorator<K, D, P, RequestContext>(spec)\n}\n\nexport const defineHttpContextDecorator: DefineHttpContextDecoratorFn = Object.freeze(\n  Object.assign(defineHttpContextDecoratorImpl, {\n    withParams: <P extends Record<string, unknown>>(): DefineHttpContextDecoratorWithParams<P> => {\n      return <K extends ContextMetaKey, D extends Record<string, DepValue> = Record<string, never>>(\n        spec: ContextDecoratorSpec<K, D, P, RequestContext>,\n      ): ContextDecorator<K, D, P, RequestContext> => defineHttpContextDecoratorImpl<K, D, P>(spec)\n    },\n  }),\n) as DefineHttpContextDecoratorFn\n","import type { Request, Response, NextFunction } from 'express'\nimport { requestStore } from '../request-store'\n\nimport { randomHex } from '../../core/web-crypto'\n\n/**\n * W3C Trace Context header name.\n * @see https://www.w3.org/TR/trace-context/#traceparent-header\n */\nexport const TRACEPARENT_HEADER = 'traceparent'\n\n/** Regex for a valid W3C traceparent: {version}-{trace-id}-{parent-id}-{flags} */\nconst TRACEPARENT_RE = /^([0-9a-f]{2})-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/\n\nexport interface TraceContextOptions {\n  /**\n   * When true, respond with a `traceresponse` header containing the trace ID.\n   * Useful for debugging. Default: false.\n   */\n  propagateResponse?: boolean\n}\n\n/**\n * Parsed W3C trace context fields.\n */\nexport interface TraceContext {\n  /** W3C traceparent version (usually '00') */\n  version: string\n  /** 32-hex-char distributed trace ID */\n  traceId: string\n  /** 16-hex-char parent span ID */\n  parentSpanId: string\n  /** 2-hex-char trace flags */\n  flags: string\n}\n\n/**\n * Generate a random 32-hex-character trace ID.\n */\nfunction generateTraceId(): string {\n  return randomHex(16)\n}\n\n/**\n * Generate a random 16-hex-character span ID.\n */\nfunction generateSpanId(): string {\n  return randomHex(8)\n}\n\n/**\n * Parse a W3C traceparent header value.\n * Returns null if the format is invalid.\n */\nexport function parseTraceparent(header: string): TraceContext | null {\n  const match = TRACEPARENT_RE.exec(header.trim().toLowerCase())\n  if (!match) return null\n\n  const version = match[1]\n  const traceId = match[2]\n  const parentSpanId = match[3]\n  const flags = match[4]\n\n  // W3C spec: version ff is invalid, all-zero trace-id and parent-id are invalid\n  if (\n    version === 'ff' ||\n    traceId === '00000000000000000000000000000000' ||\n    parentSpanId === '0000000000000000'\n  ) {\n    return null\n  }\n\n  return { version, traceId, parentSpanId, flags }\n}\n\n/**\n * Middleware that extracts W3C `traceparent` header and stores trace context\n * in the request's AsyncLocalStorage store.\n *\n * If no valid `traceparent` header is present, a new traceId is generated\n * so that every request always has a trace ID available for correlation.\n *\n * Must be mounted **after** `requestScopeMiddleware()` (which creates the store).\n *\n * @example\n * ```ts\n * bootstrap({\n *   middlewares: [\n *     requestScopeMiddleware(),\n *     traceContext(),          // extracts or generates traceId\n *     requestLogger(),\n *     express.json(),\n *   ],\n * })\n * ```\n */\nexport function traceContext(options: TraceContextOptions = {}) {\n  return (req: Request, res: Response, next: NextFunction) => {\n    const store = requestStore.getStore()\n\n    const traceparentHeader = req.headers[TRACEPARENT_HEADER]\n    const raw = Array.isArray(traceparentHeader) ? traceparentHeader[0] : traceparentHeader\n    const parsed = raw ? parseTraceparent(raw) : null\n\n    const traceId = parsed?.traceId ?? generateTraceId()\n    const spanId = generateSpanId()\n\n    // Attach to the request store so logger + downstream code can access it\n    if (store) {\n      store.values.set('traceId', traceId)\n      store.values.set('spanId', spanId)\n      if (parsed) {\n        store.values.set('parentSpanId', parsed.parentSpanId)\n        store.values.set('traceFlags', parsed.flags)\n        store.values.set('traceVersion', parsed.version)\n      }\n    }\n\n    // Also expose on req for convenience\n    ;(req as any).traceId = traceId\n    ;(req as any).spanId = spanId\n\n    if (options.propagateResponse) {\n      res.setHeader('traceresponse', traceId)\n    }\n\n    next()\n  }\n}\n"],"mappings":";;;;;;;;;;o9IA2BA,IAAa,WAAb,cAAgC,KAAsB,CASpD,MAAM,OAA8B,CAElC,OADA,KAAK,KAAK,MAAM,EACT,IACT,CACF,EA8BA,SAAgB,cAAc,GAAG,QAAuC,CACtE,IAAM,KAAO,IAAI,WACjB,IAAK,IAAM,SAAS,QAAS,KAAK,KAAK,KAAK,EAC5C,OAAO,IACT,CCnCA,IAAa,iBAAb,cAAsC,KAAM,CACd,YAA5B,YAAY,YAAqC,CAC/C,MAAM,oBAAoB,YAAY,6BAA6B,EADzC,KAAA,YAAA,YAE1B,KAAK,KAAO,kBACd,CACF,EAEa,eAAb,KAA4B,CAaR,KAZlB,MAAqC,SACrC,SAAmB,EACnB,UAAoB,EACpB,iBAA2B,EAC3B,YACA,SAEA,iBACA,aACA,YAEA,YACE,KACA,QACA,CAFgB,KAAA,KAAA,KAGhB,KAAK,iBAAmB,QAAQ,iBAChC,KAAK,aAAe,QAAQ,aAC5B,KAAK,YAAc,QAAQ,aAAe,CAC5C,CAMA,MAAM,QAAW,GAAkC,CAOjD,GANA,KAAK,0BAA0B,EAE3B,KAAK,QAAU,QAIf,KAAK,QAAU,aAAe,KAAK,kBAAoB,KAAK,YAC9D,MAAM,IAAI,iBAAiB,KAAK,IAAI,EAGlC,KAAK,QAAU,aACjB,KAAK,mBAGP,GAAI,CACF,IAAM,OAAS,MAAM,GAAG,EAExB,OADA,KAAK,UAAU,EACR,MACT,OAAS,MAAO,CAEd,MADA,KAAK,UAAU,EACT,KACR,CACF,CAGA,UAAgC,CAE9B,OADA,KAAK,0BAA0B,EACxB,KAAK,KACd,CAGA,UAAgC,CAE9B,OADA,KAAK,0BAA0B,EACxB,CACL,SAAU,KAAK,SACf,UAAW,KAAK,UAChB,MAAO,KAAK,MACZ,GAAI,KAAK,YAAc,CAAE,YAAa,KAAK,WAAY,EAAI,CAAC,CAC9D,CACF,CAGA,OAAc,CACZ,KAAK,MAAQ,SACb,KAAK,SAAW,EAChB,KAAK,UAAY,EACjB,KAAK,iBAAmB,EACxB,KAAK,YAAc,IAAA,GACnB,KAAK,SAAW,IAAA,EAClB,CAEA,WAA0B,CACpB,KAAK,QAAU,cAEjB,KAAK,MAAQ,SACb,KAAK,SAAW,EAChB,KAAK,iBAAmB,EACxB,KAAK,SAAW,IAAA,IAElB,KAAK,WACP,CAEA,WAA0B,CACxB,KAAK,WACL,KAAK,YAAc,IAAI,KAEnB,KAAK,QAAU,aAEjB,KAAK,MAAQ,OACb,KAAK,SAAW,KAAK,IAAI,EACzB,KAAK,iBAAmB,GACf,KAAK,QAAU,UAAY,KAAK,UAAY,KAAK,mBAC1D,KAAK,MAAQ,OACb,KAAK,SAAW,KAAK,IAAI,EAE7B,CAEA,2BAA0C,CACpC,KAAK,QAAU,QAAU,KAAK,UAAY,MACxC,KAAK,IAAI,EAAI,KAAK,UAAY,KAAK,eACrC,KAAK,MAAQ,YACb,KAAK,iBAAmB,EAG9B,CACF,EC5FA,MAAM,aACJ,SAA6B,CAAC,EAC9B,UAA8B,CAAC,KAClB,CAAE,GAAG,SAAU,GAAG,SAAU,GAErC,aAAe,KAAc,QAA0B,GAAG,KAAK,GAAG,QAuBxE,SAAgB,aACd,QACwB,CACxB,IAAM,WACJ,aACA,OACA,YACe,CACf,IAAM,OAAS,YAAY,QAAQ,SAAU,SAAS,EAGhD,MAAQ,QAAQ,MAAM,OAAQ,CAAE,KAAM,aAAc,MAAO,CAAC,EAElE,MADA,OAAM,KAAO,aACN,KACT,EAEM,YAAc,aAAsB,OAAkD,CAC1F,IAAI,MAEE,YAAc,KAAO,YAA8C,CACvE,GAAI,MAAO,OAAO,MAClB,IAAM,MAAQ,KAAK,QAAU,CAAC,EAAA,CAAG,IAAK,KAAQ,UAAU,QAAQ,GAAY,CAAC,EACvE,OAAS,MAAM,KAAK,WAAW,GAAG,IAAI,EAE5C,MADA,OAAQ,UAAU,aAAc,GAAO,MAA0B,EAC1D,KACT,EAEA,MAAO,CACL,KAAM,aACN,MAAM,QAAQ,UAAsB,CAClC,IAAM,MAAQ,MAAM,YAAY,SAAS,EAIzC,MAAM,WAAW,SAAS,EAC1B,MAAM,MAAM,UAAU,SAAS,CACjC,EACA,MAAM,UAAW,CACf,MAAM,OAAO,WAAW,CAC1B,CACF,CACF,EAEM,SAAY,QAChB,UAAU,QAAQ,KAAM,GAAO,MAAM,GASvC,MAPA,SAAQ,QAAU,UAAmB,SACnC,UAAU,YAAY,QAAQ,KAAM,SAAS,EAAG,GAAM,MAAM,EAE9D,QAAQ,MAAS,MAAsC,WAAW,QAAQ,KAAM,IAAI,EAEpF,OAAO,eAAe,QAAS,aAAc,CAAE,MAAO,OAAO,OAAO,CAAE,GAAG,OAAQ,CAAC,CAAE,CAAC,EAE9E,OACT,CCfA,SAAgB,mBAAmB,KAAc,KAA+B,CAQhF,CC7EA,SAAgB,cAAc,QAA0C,CACtE,IAAI,IAEE,WACJ,OAAS,SAAY,CACnB,IAAM,SAAW,IAAI,YAAY,OAAO,EACxC,GAAI,CACF,MAAM,SAAS,mBAAmB,CACpC,OAAS,IAAK,CAMZ,KAFA,KAAM,IAAA,GACN,MAAM,SAAS,SAAS,CAAC,CAAC,UAAY,CAAC,CAAC,EAClC,GACR,CACA,OAAO,QACT,EAAA,CAAG,EACI,KAGT,MAAO,CACL,MAEA,MAAM,MAAM,QAAS,SAAU,CAC7B,IAAM,SAAW,MAAO,MAAM,MAAM,EAAA,CAAG,MAAM,OAAO,EAEpD,OADA,sBAAsB,QAAQ,EACvB,QACT,EAEA,MAAM,KAAK,IAAK,IAAK,SAAU,CAG7B,IADA,MADuB,MAAM,EAAA,CACpB,OAAO,IAAK,GAAG,EACpB,UAAU,UAAW,CAGvB,IAAM,KAAO,IAAI,QAAe,SAAY,IAAI,KAAK,YAAe,QAAQ,CAAC,CAAC,EAC9E,SAAS,UAAU,KAAK,KAAK,oBAAoB,CAAC,CACpD,CACF,EAEA,MAAM,OAAQ,CACZ,IAAM,QAAU,IAChB,IAAM,IAAA,GACF,SAAS,MAAO,MAAM,QAAA,CAAS,SAAS,CAC9C,CACF,CACF,CCKA,SAAS,+BAIP,KAAgG,CAChG,OAAO,uBAAgD,IAAI,CAC7D,CAEA,MAAa,2BAA2D,OAAO,OAC7E,OAAO,OAAO,+BAAgC,CAC5C,eAEI,MAC8C,+BAAwC,IAAI,CAEhG,CAAC,CACH,EC1Ha,mBAAqB,cAG5B,eAAiB,8DA2BvB,SAAS,iBAA0B,CACjC,OAAO,UAAU,EAAE,CACrB,CAKA,SAAS,gBAAyB,CAChC,OAAO,UAAU,CAAC,CACpB,CAMA,SAAgB,iBAAiB,OAAqC,CACpE,IAAM,MAAQ,eAAe,KAAK,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,EAC7D,GAAI,CAAC,MAAO,OAAO,KAEnB,IAAM,QAAU,MAAM,GAChB,QAAU,MAAM,GAChB,aAAe,MAAM,GACrB,MAAQ,MAAM,GAWpB,OAPE,UAAY,MACZ,UAAY,oCACZ,eAAiB,mBAEV,KAGF,CAAE,QAAS,QAAS,aAAc,KAAM,CACjD,CAuBA,SAAgB,aAAa,QAA+B,CAAC,EAAG,CAC9D,OAAQ,IAAc,IAAe,OAAuB,CAC1D,IAAM,MAAQ,aAAa,SAAS,EAE9B,kBAAoB,IAAI,QAAQ,oBAChC,IAAM,MAAM,QAAQ,iBAAiB,EAAI,kBAAkB,GAAK,kBAChE,OAAS,IAAM,iBAAiB,GAAG,EAAI,KAEvC,QAAU,QAAQ,SAAW,gBAAgB,EAC7C,OAAS,eAAe,EAG1B,QACF,MAAM,OAAO,IAAI,UAAW,OAAO,EACnC,MAAM,OAAO,IAAI,SAAU,MAAM,EAC7B,SACF,MAAM,OAAO,IAAI,eAAgB,OAAO,YAAY,EACpD,MAAM,OAAO,IAAI,aAAc,OAAO,KAAK,EAC3C,MAAM,OAAO,IAAI,eAAgB,OAAO,OAAO,IAKlD,IAAa,QAAU,QACvB,IAAa,OAAS,OAEnB,QAAQ,mBACV,IAAI,UAAU,gBAAiB,OAAO,EAGxC,KAAK,CACP,CACF"}

package/dist/{kv-stores-Dx5RvIaP.d.mts → kv-stores-B-1WZ2Fh.d.mts}

@@ -1,9 +1,39 @@
 
-import { x as MiddlewareHandler } from "./decorators-mg0qJ6Qc.mjs";
+import { x as MiddlewareHandler } from "./decorators-DOcWsXci.mjs";
+import { D as RequestContext, S as RuntimeResponse } from "./adapter-DK8WDonT.mjs";
 import { d as RouteFlagTest } from "./route-flag-B1lQht6v.mjs";
-import { E as RequestContext, x as RuntimeResponse } from "./adapter-2bnoYEPX.mjs";
 import { n as RateLimitStore } from "./rate-limit-Bwed3jOV.mjs";
 import { i as SessionStore, n as SessionData } from "./session-BHgRyfqZ.mjs";
+//#region src/http/background.d.ts
+/**
+ * Keep `promise` alive past the response. A rejection is logged (with the
+ * request id when called during a request), never left unhandled.
+ *
+ * @example
+ * ```ts
+ * @Post('/')
+ * async create(ctx: RequestContext) {
+ *   const order = await this.orders.create(ctx.body)
+ *   ctx.waitUntil(this.mailer.sendReceipt(order)) // or waitUntil(...) outside a handler
+ *   return order
+ * }
+ * ```
+ */
+declare function waitUntil(promise: Promise<unknown>): void;
+/**
+ * Resolve once every registered promise has settled — including work
+ * registered while waiting. Never rejects.
+ */
+declare function settleBackgroundWork(): Promise<void>;
+/**
+ * The platform hook `createHandler()` and the web entry forward background
+ * work to. Cloudflare Workers' `ctx`, Netlify's `context`, and `{ waitUntil }`
+ * from `@vercel/functions` all have this shape.
+ */
+interface PlatformContext {
+  waitUntil?(promise: Promise<unknown>): void;
+}
+//#endregion
 //#region src/http/reply.d.ts
 declare const REPLY_BRAND: unique symbol;
 /**
@@ -218,5 +248,5 @@ declare class KvSessionStore implements SessionStore {
   touch(sid: string, maxAge: number): Promise<void>;
 }
 //#endregion
-export { KvSessionStoreOptions as a, InferHandlerResponse as c, isReply as d, reply as f, KvSessionStore as i, Reply as l, KvRateLimitStore as n, RateLimitGuardOptions as o, KvRateLimitStoreOptions as r, rateLimitGuard as s, KvLike as t, applyHandlerResult as u };
-//# sourceMappingURL=kv-stores-Dx5RvIaP.d.mts.map
+export { KvSessionStoreOptions as a, InferHandlerResponse as c, isReply as d, reply as f, waitUntil as h, KvSessionStore as i, Reply as l, settleBackgroundWork as m, KvRateLimitStore as n, RateLimitGuardOptions as o, PlatformContext as p, KvRateLimitStoreOptions as r, rateLimitGuard as s, KvLike as t, applyHandlerResult as u };
+//# sourceMappingURL=kv-stores-B-1WZ2Fh.d.mts.map

package/dist/kv-stores-B-1WZ2Fh.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kv-stores-B-1WZ2Fh.d.mts","names":[],"sources":["../src/http/background.ts","../src/http/reply.ts","../src/http/middleware/rate-limit-guard.ts","../src/http/middleware/kv-stores.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;iBAuCgB,UAAU,SAAS;;;;;iBAiBb,wBAAwB;;;;;;UAc7B;EACf,WAAW,SAAS;;;;cCvDhB;;;;;;UAOW,MAAM,2BAA2B;YACtC;WACD,QAAQ;WACR,MAAM;;;;;;;;;;;;iBAaD,MAAM,kBAAkB,GAAG,QAAQ,GAAG,MAAM,IAAI,MAAM,GAAG;kBAAzD;MAKJ,KAAA,GAAC,MAAQ,MAAI,WAAW;MAEnB,UAAA,GAAC,MAAQ,MAAI,WAAW;MAEvB,WAAA,GAAC,MAAQ,MAAI,WAAW;MAEpB,iBAAA;;;;;;;;;;;;;;;;KAgBV,qBAAqB,KAAK,eAAc,wBAAwB,MACvE,QAAQ,QAAQ,mDAEf,YAAY,QAAQ,QAAQ;KAG7B,YAAY,KACf,UAAU,oBAAoB,KAC1B,IACA,UAAU,4BAWR;iBAEQ,QAAQ,iBAAiB,SAAS;;;;;;;;;;;;iBAmBlC,mBAAmB,KAAK,gBAAgB;;;UCjGvC;;EAEf;;EAEA;;EAEA;;EAEA;;;;;;;;;;;;;;;;;;;;;;;EAuBA,gBAAgB,KAAK;;EAErB;;;;;;EAMA,QAAQ;;EAER,QAAQ,KAAK;;;;;;;;;;;;;;;;EAgBb,aAAa;;;;;;;;;;;;;;;;;iBA0DC,eAAe,UAAS,wBAA6B;;;;;;;;;;;;;;;;;;;UCxGpD;EACf,IAAI,cAAc;EAClB,IAAI,aAAa,eAAe;IAAY;MAA2B;EACvE,OAAO,cAAc;;UAQN;;EAEf;;EAEA;;;;;;;;;;;;cAaW,4BAA4B;mBAKpB;mBAJF;mBACA;EAEjB,YACmB,IAAI,QACrB,SAAS;EAML,UAAU,cAAc;IAAU;IAAmB,WAAW;;EAahE,UAAU,cAAc;EAQxB,MAAM,cAAc;UAIZ;UAUA;;UAOC;;EAEf;;;;;;;;;;;;cAaW,0BAA0B;mBAIlB;mBAHF;EAEjB,YACmB,IAAI,QACrB,UAAS;EAKL,IAAI,cAAc,QAAQ;EAU1B,IAAI,aAAa,MAAM,aAAa,iBAAiB;EAMrD,QAAQ,cAAc;EAItB,MAAM,aAAa,iBAAiB"}

package/dist/{kv-stores-DUFcps01.mjs → kv-stores-BDcvhJBw.mjs}

@@ -1,5 +1,5 @@
 /**
- * @forinda/kickjs v8.6.0
+ * @forinda/kickjs v8.7.0
  *
  * Copyright (c) Felix Orinda
  *
@@ -8,5 +8,5 @@
  *
  * @license MIT
  */
-import{n as assertFlagTest,s as matchesFlagTest}from"./route-flag-B4sNP7zH.mjs";var LazyMemoryStore=class{windowMs;hits=new Map;constructor(windowMs){this.windowMs=windowMs}async increment(key){let now=Date.now(),entry=this.hits.get(key);if(entry&&entry.reset>now)return entry.hits++,{totalHits:entry.hits,resetTime:new Date(entry.reset)};if(this.hits.size>1e4)for(let[k,e]of this.hits)e.reset<=now&&this.hits.delete(k);let fresh={hits:1,reset:now+this.windowMs};return this.hits.set(key,fresh),{totalHits:1,resetTime:new Date(fresh.reset)}}async decrement(key){let entry=this.hits.get(key);entry&&entry.hits>0&&entry.hits--}async reset(key){this.hits.delete(key)}};function defaultKey(ctx){return ctx.ip??`global`}function rateLimitGuard(options={}){let max=options.max??100,windowMs=options.windowMs??6e4,message=options.message??`Too Many Requests`,statusCode=options.statusCode??429,keyGenerator=options.keyGenerator??defaultKey,sendHeaders=options.headers??!0,store=options.store??new LazyMemoryStore(windowMs),exemptWhen=options.exemptWhen;return exemptWhen!==void 0&&assertFlagTest(exemptWhen,`rateLimitGuard({ exemptWhen })`),async(ctx,next)=>{if(options.skip?.(ctx)||exemptWhen!==void 0&&matchesFlagTest(exemptWhen,ctx.route?.flags,ctx.route))return next();let{totalHits,resetTime}=await store.increment(keyGenerator(ctx)),remaining=Math.max(0,max-totalHits);if(sendHeaders&&(ctx.setHeader(`X-RateLimit-Limit`,String(max)),ctx.setHeader(`X-RateLimit-Remaining`,String(remaining)),ctx.setHeader(`X-RateLimit-Reset`,String(Math.ceil(resetTime.getTime()/1e3)))),totalHits>max){let retryAfter=Math.max(1,Math.ceil((resetTime.getTime()-Date.now())/1e3));sendHeaders&&ctx.setHeader(`Retry-After`,String(retryAfter)),ctx.json({message},statusCode);return}next()}}function kvTtlSeconds(ms){return Math.max(60,Math.ceil(ms/1e3))}var KvRateLimitStore=class{kv;prefix;windowMs;constructor(kv,options){this.kv=kv,this.windowMs=options.windowMs,this.prefix=options.prefix??`rl:`}async increment(key){let now=Date.now(),entry=await this.read(key);if(entry&&entry.reset>now)return entry.hits++,await this.write(key,entry),{totalHits:entry.hits,resetTime:new Date(entry.reset)};let fresh={hits:1,reset:now+this.windowMs};return await this.write(key,fresh),{totalHits:1,resetTime:new Date(fresh.reset)}}async decrement(key){let entry=await this.read(key);entry&&entry.hits>0&&(entry.hits--,await this.write(key,entry))}async reset(key){await this.kv.delete(this.prefix+key)}async read(key){let raw=await this.kv.get(this.prefix+key);if(raw===null)return null;try{return JSON.parse(raw)}catch{return null}}async write(key,entry){await this.kv.put(this.prefix+key,JSON.stringify(entry),{expirationTtl:kvTtlSeconds(Math.max(entry.reset-Date.now(),1e3))})}},KvSessionStore=class{kv;prefix;constructor(kv,options={}){this.kv=kv,this.prefix=options.prefix??`sess:`}async get(sid){let raw=await this.kv.get(this.prefix+sid);if(raw===null)return null;try{return JSON.parse(raw)}catch{return null}}async set(sid,data,maxAge){await this.kv.put(this.prefix+sid,JSON.stringify(data),{expirationTtl:kvTtlSeconds(maxAge)})}async destroy(sid){await this.kv.delete(this.prefix+sid)}async touch(sid,maxAge){let data=await this.get(sid);data!==null&&await this.set(sid,data,maxAge)}};export{KvSessionStore as n,rateLimitGuard as r,KvRateLimitStore as t};
-//# sourceMappingURL=kv-stores-DUFcps01.mjs.map
+import{n as assertFlagTest,s as matchesFlagTest}from"./route-flag-BCBTtP_4.mjs";var LazyMemoryStore=class{windowMs;hits=new Map;constructor(windowMs){this.windowMs=windowMs}async increment(key){let now=Date.now(),entry=this.hits.get(key);if(entry&&entry.reset>now)return entry.hits++,{totalHits:entry.hits,resetTime:new Date(entry.reset)};if(this.hits.size>1e4)for(let[k,e]of this.hits)e.reset<=now&&this.hits.delete(k);let fresh={hits:1,reset:now+this.windowMs};return this.hits.set(key,fresh),{totalHits:1,resetTime:new Date(fresh.reset)}}async decrement(key){let entry=this.hits.get(key);entry&&entry.hits>0&&entry.hits--}async reset(key){this.hits.delete(key)}};function defaultKey(ctx){return ctx.ip??`global`}function rateLimitGuard(options={}){let max=options.max??100,windowMs=options.windowMs??6e4,message=options.message??`Too Many Requests`,statusCode=options.statusCode??429,keyGenerator=options.keyGenerator??defaultKey,sendHeaders=options.headers??!0,store=options.store??new LazyMemoryStore(windowMs),exemptWhen=options.exemptWhen;return exemptWhen!==void 0&&assertFlagTest(exemptWhen,`rateLimitGuard({ exemptWhen })`),async(ctx,next)=>{if(options.skip?.(ctx)||exemptWhen!==void 0&&matchesFlagTest(exemptWhen,ctx.route?.flags,ctx.route))return next();let{totalHits,resetTime}=await store.increment(keyGenerator(ctx)),remaining=Math.max(0,max-totalHits);if(sendHeaders&&(ctx.setHeader(`X-RateLimit-Limit`,String(max)),ctx.setHeader(`X-RateLimit-Remaining`,String(remaining)),ctx.setHeader(`X-RateLimit-Reset`,String(Math.ceil(resetTime.getTime()/1e3)))),totalHits>max){let retryAfter=Math.max(1,Math.ceil((resetTime.getTime()-Date.now())/1e3));sendHeaders&&ctx.setHeader(`Retry-After`,String(retryAfter)),ctx.json({message},statusCode);return}next()}}function kvTtlSeconds(ms){return Math.max(60,Math.ceil(ms/1e3))}var KvRateLimitStore=class{kv;prefix;windowMs;constructor(kv,options){this.kv=kv,this.windowMs=options.windowMs,this.prefix=options.prefix??`rl:`}async increment(key){let now=Date.now(),entry=await this.read(key);if(entry&&entry.reset>now)return entry.hits++,await this.write(key,entry),{totalHits:entry.hits,resetTime:new Date(entry.reset)};let fresh={hits:1,reset:now+this.windowMs};return await this.write(key,fresh),{totalHits:1,resetTime:new Date(fresh.reset)}}async decrement(key){let entry=await this.read(key);entry&&entry.hits>0&&(entry.hits--,await this.write(key,entry))}async reset(key){await this.kv.delete(this.prefix+key)}async read(key){let raw=await this.kv.get(this.prefix+key);if(raw===null)return null;try{return JSON.parse(raw)}catch{return null}}async write(key,entry){await this.kv.put(this.prefix+key,JSON.stringify(entry),{expirationTtl:kvTtlSeconds(Math.max(entry.reset-Date.now(),1e3))})}},KvSessionStore=class{kv;prefix;constructor(kv,options={}){this.kv=kv,this.prefix=options.prefix??`sess:`}async get(sid){let raw=await this.kv.get(this.prefix+sid);if(raw===null)return null;try{return JSON.parse(raw)}catch{return null}}async set(sid,data,maxAge){await this.kv.put(this.prefix+sid,JSON.stringify(data),{expirationTtl:kvTtlSeconds(maxAge)})}async destroy(sid){await this.kv.delete(this.prefix+sid)}async touch(sid,maxAge){let data=await this.get(sid);data!==null&&await this.set(sid,data,maxAge)}};export{KvSessionStore as n,rateLimitGuard as r,KvRateLimitStore as t};
+//# sourceMappingURL=kv-stores-BDcvhJBw.mjs.map